Skip to content
OpenAdvisories

Product · HumHub GmbH & Co. KG

cfiles

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2025-65963

    CFiles Unauthorized Folder/ZIP Access in Public Spaces

    Files is a module for managing files inside spaces and user profiles. Prior to versions 0.16.11 and 0.17.2, insufficient authorization checks allow non-member users to create new folders, up- and download files as a ZIP archive in public spaces. Private space…

    HumHub GmbH & Co. KG cfiles
  • Medium 5.1
    CVE-2025-54789

    Files is Vulnerable to Reflected Self-XSS through its File Move Functionality

    Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, the File Move functionality does not contain logic that prevents injection of arbitrary JavaScript, which can lead to Browser JS code execution in the context …

    HumHub GmbH & Co. KG cfiles