Beveiligingsadvies

CVE-2026-63358

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-21 20:13:07

Laatst bijgewerkt 2026-07-30 17:30:09

Toegewezen door cisa-cg

CVSS-score 8.4

Status PUBLISHED

Beschrijving

FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root.

← Alle CVE's bekijken Bekijk op cve.org ↗