Description
Fileflows versions before 25.05.2 are affected by an authenticated SQL injection vulnerability in the library-file search function. Successful exploitation requires the system to use MySQL as the underlying database and could result in privilege escalation or data exfiltration.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| fileflows | fileflows | < 25.05.2 | 25.05.2 |