Fireshare versions before 1.6.14 contain an argument injection vulnerability (CWE-88) in the video upload functionality. This vulnerability allows unauthenticated attackers to inject arguments improperly, resulting in the ability to write or overwrite arbitrary system files. The vulnerability has a CVSS 3.1 score of 9.8, indicating critical severity with network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor fixed this issue in version 1.6.14.

An unauthenticated attacker can exploit this vulnerability to write or overwrite system files on the affected host running Fireshare versions prior to 1.6.14. This can lead to full system compromise, including potential remote code execution, data corruption, or denial of service. The high CVSS score reflects the critical nature of the impact on confidentiality, integrity, and availability.

Upgrade Fireshare to version 1.6.14 or later to remediate this vulnerability. This version contains the official fix for the argument injection issue. No other mitigation is specified or required once the software is updated.