Approved changes feed: RSS · Atom

cpe:2.3:a:filegator:filegator:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFilegator (037c654c-9052-5321-81ab-e876fee6f89a)
ProductFilegator (10e78f8c-351b-538a-a827-958b37745dff)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-63358 vulnerable 2026-07-29 01:06:19.424532 FileGator privilege escalation
HIGH (7.3)
FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()' conversion, with no validation. This allows an authenticated user with 'chmod' permission to upgrade their privileges to root.
Published: 2026-07-21T20:13:07.624Z
Updated: 2026-07-30T17:30:09.151Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1850 vulnerable 2026-06-08 05:39:14.039892 Path Traversal in filegator/filegator
MEDIUM (5.4)
Path Traversal in GitHub repository filegator/filegator prior to 7.8.0.
Published: 2022-05-24T12:10:10.000Z
Updated: 2024-08-03T00:17:00.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1849 vulnerable 2026-06-08 05:39:14.039352 Session Fixation in filegator/filegator
MEDIUM (4.3)
Session Fixation in GitHub repository filegator/filegator prior to 7.8.0.
Published: 2022-05-24T12:05:10.000Z
Updated: 2024-08-03T00:17:00.823Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.