Liquidfiles

9 CVEs across 1 Liquidfiles products. Browse Liquidfiles vulnerabilities, severities, and proof-of-concept exploits.

Liquidfiles products with known CVEs

ProductCVEs
Liquidfiles9
Liquidfiles CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-126732026-06-20Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain…
CVE-2025-56132High7.32025-09-30LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable response…
CVE-2025-46094Low3.82025-08-04LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.
CVE-2025-46093Critical9.92025-08-04LiquidFiles before 4.1.2 supports FTP SITE CHMOD for mode 6777 (setuid and setgid), which allows FTPDrop users to execute arbitrary code as root by leveraging…
CVE-2023-4393Medium5.42023-10-30HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phishing attacks against…
CVE-2021-43397High8.82021-11-11LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin.
CVE-2021-30140Medium5.42021-04-06LiquidFiles 3.4.15 has stored XSS through the "send email" functionality when sending a file via email to an administrator. When a file has no extension and co…
CVE-2020-29072Medium6.12020-11-25A Cross-Site Script Inclusion vulnerability was found on LiquidFiles before 3.3.19. This client-side attack requires user interaction (opening a link) and succ…
CVE-2020-29071Critical9.02020-11-25An XSS issue was found in the Shares feature of LiquidFiles before 3.3.19. The issue arises from the insecure rendering of HTML files uploaded to the platform…