CVE-2023-28876

A Broken Access Control issue in comments to uploaded files in Filerun through Update 20220202 allows attackers to delete comments on files uploaded by other users.

Score

CVSS 3.1 4.3 Medium

Status

Modified - cve@mitre.org

Published

2023-12-06

Last modified

2024-08-02

Affected products

• Filerun (Afian)

References

• https://filerun.com/changelog
• https://herolab.usd.de/security-advisories/usd-2022-0010/