Threats tagged 'ghsa-g8hr-rr8x-cm5q'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2026-129160free-fs 2.0.1 through 2.3.1 contains an SQL injection vulnerability in FileShareServiceImpl.getPages, which passes the High7.12026-11-13GCVE DatabaseCVE-2026-129160 free-fs versions 2.0.1 through 2.3.1 have an SQL injection vulnerability in the FileShareServiceImpl.getPages method. This flaw allows authenticated users to inject SQL via the orderBy parameter in the /apis/share/pages endpoint, enabling them to read arbitrary database contents such as share codes. Report on CVE-2026-129160 Vulnerability CWE-89 #ghsa-g8hr-rr8x-cm5q	GCVE Database	2026-11-13

Page 1 of 1