Skip to content
OpenAdvisories

Vendor

FileGator

5 known vulnerabilities.

Products

FileGator 3 filegator/filegator 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-94619

    FileGator: Missing authorization in POST /upload allows cross-user read and deletion of temporary files

    FileGator is a multi-user file manager. Prior to 7.15.0, POST /upload in backend/Controllers/UploadController.php uses the request-supplied resumableFilename as an unnamespaced key in shared temporary storage. In a multi-user deployment configured with distin…

    FileGator FileGator filegator/filegator Packagist
  • Medium 5.4
    CVE-2026-94618

    FileGator: Missing authorization in GET /batchdownload allows cross-user retrieval of another user's archive

    FileGator is a multi-user file manager. Prior to 7.15.0, GET /batchdownload in backend/Controllers/DownloadController.php uses batchDownloadStart() to stream a shared temporary archive selected by the request-supplied uniqid without checking that the current …

    FileGator FileGator filegator/filegator Packagist
  • Medium 5.4
    CVE-2022-1850

    Path Traversal in filegator/filegator

    Path Traversal in GitHub repository filegator/filegator prior to 7.8.0.

    FileGator filegator/filegator filegator/filegator Packagist
  • Medium 4.3
    CVE-2022-1849

    Session Fixation in filegator/filegator

    Session Fixation in GitHub repository filegator/filegator prior to 7.8.0.

    FileGator filegator/filegator filegator/filegator Packagist