Advisories · Technology
ShaneIsrael fireshare.
Every CVE that names ShaneIsrael fireshare among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints
- ShaneIsrael fireshare
- Server-side request forgery (SSRF)
- CVSS 9.8 CriticalCritical · CVSS 9+
Fireshare has Unauthenticated Argument Injection to Arbitrary File Write/Overwrite
- ShaneIsrael fireshare
- Command injection
- CVSS 9.1 CriticalCritical · CVSS 9+
Unauthenticated Path Traversal Arbitrary File Write in /api/uploadChunked/public
- ShaneIsrael fireshare
- Path traversal
- CVSS 7.1 High
Fireshare has Path Traversal Arbitrary File Write in `/api/uploadChunked`
- ShaneIsrael fireshare
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
Fireshare Public Uploads feature is vulnerable to OS Command Injection (RCE)
- ShaneIsrael fireshare
- Command injection