CVE-2022-1958

A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-201960.

• CWE-284

• https://vuldb.com/?ctiid.201960Third Party Advisory
• https://vuldb.com/?id.201960Third Party Advisory
• https://www.filecloud.com/supportdocs/fcdoc/2v/server/security-advisories/2022-security-advisories/advisory-2022-06-01-potential-unauthorized-data-access-when-using-network-folders-with-ntfs-permissionsVendor Advisory
• https://www.scip.ch/?news.20220615Third Party Advisory
• https://vuldb.com/?ctiid.201960Third Party Advisory
• https://vuldb.com/?id.201960Third Party Advisory
• https://www.filecloud.com/supportdocs/fcdoc/2v/server/security-advisories/2022-security-advisories/advisory-2022-06-01-potential-unauthorized-data-access-when-using-network-folders-with-ntfs-permissionsVendor Advisory
• https://www.scip.ch/?news.20220615Third Party Advisory

Published

Jun 15, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1952The Free Booking Plugin for Hotels, Restaurant and Car Renta…9.8
• CVE-2022-1953The Product Configurator for WooCommerce WordPress plugin be…9.1
• CVE-2022-1954A Regular Expression Denial of Service vulnerability in GitL…5.3
• CVE-2022-1955Session 1.13.0 allows an attacker with physical access to th…4.6
• CVE-2022-1956The Shortcut Macros WordPress plugin through 1.3 does not ha…4.3
• CVE-2022-1957The Comment License WordPress plugin before 1.4.0 does not h…4.3
• CVE-2022-1959AppLock version 7.9.29 allows an attacker with physical acce…6.6
• CVE-2022-1960The MyCSS WordPress plugin through 1.1 does not have CSRF ch…4.3
• CVE-2022-1961The Google Tag Manager for WordPress (GTM4WP) plugin is vuln…4.8
• CVE-2022-1962Uncontrolled recursion in the Parse functions in go/parser b…5.5
• CVE-2022-1963An issue has been discovered in GitLab CE/EE affecting all v…5.3
• CVE-2022-1964The Easy SVG Support WordPress plugin before 3.3.0 does not …5.4