fileorganizer records

4 published records for vendor fileorganizer.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

4 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
36Monitor	CVE-2024-7985Proof of concept	FileOrganizer <= 1.0.9 - Authenticated (Subscriber+) Arbitrary File Uploadfileorganizer · fileorganizer · CWE-434 RCE File upload	High8.8	2.3%Oct 29, 2024
30Monitor	CVE-2024-5599No exploit	FileOrganizer <= 1.0.7 - Sensitive Information Exposure via Directory Listingfileorganizer · fileorganizer · CWE-922 Pre-auth	High7.5	0.5%Jun 7, 2024
28Monitor	CVE-2023-3664No exploit	FileOrganizer <= 1.0.2 - Admin+ Arbitrary File Accessfileorganizer · fileorganizer · CWE-284 Broken access control (IDOR)	High7.2	0.8%Sep 25, 2023
21Monitor	CVE-2024-2324No exploit	FileOrganizer and FileOrganizer Pro <= 1.0.6 - Authenticated Stored Cross-Site Scriptingfileorganizer · fileorganizer · CWE-79 XSS	Medium5.4	0.3%May 2, 2024

CVE-2024-7985
36Monitor
FileOrganizer <= 1.0.9 - Authenticated (Subscriber+) Arbitrary File Upload
HighCVSS 8.8Proof of conceptEPSS 2%
- RCE
- File upload
fileorganizer · fileorganizerOct 29, 2024
CVE-2024-5599
30Monitor
FileOrganizer <= 1.0.7 - Sensitive Information Exposure via Directory Listing
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
fileorganizer · fileorganizerJun 7, 2024
CVE-2023-3664
28Monitor
FileOrganizer <= 1.0.2 - Admin+ Arbitrary File Access
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
fileorganizer · fileorganizerSep 25, 2023
CVE-2024-2324
21Monitor
FileOrganizer and FileOrganizer Pro <= 1.0.6 - Authenticated Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
fileorganizer · fileorganizerMay 2, 2024