Skip to content
OpenAdvisories

Vendor

haiwen

3 known vulnerabilities.

Products

seahub 2 seafile-server 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-56768

    Seahub < 13.0.23 - Authentication Bypass in ShareLinkZipTaskView GET Method

    Seahub before 13.0.23 does not enforce SHARE_LINK_LOGIN_REQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the GET endpoint to obtain a fileserver zip toke…

    haiwen seahub
  • High 7.4
    CVE-2021-43820

    Permissions check bypass in Seafile

    Seafile is an open source cloud storage system. A sync token is used in Seafile file syncing protocol to authorize access to library data. To improve performance, the token is cached in memory in seaf-server. Upon receiving a token from sync client or SeaDriv…

    haiwen seafile-server