CVEvulnerability

CVE-2026-93693

6.5 MEDIUM Published 2026-10-12 Modified 2026-10-15 Official page ↗
Status
Awaiting Analysis
Published
2026-10-12
Last modified
2026-10-15
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Weaknesses
CWE-116, CWE-20, CWE-306, CWE-918

Description

In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insufficient validation on queue service can be chained by a remote unauthenticated attacker to issue server-side requests to unintended local handlers and perform unauthorized queue operations.

Related

Weakness · CWE (4)

  • CWE-116 Improper Encoding or Escaping of Output weakness
  • CWE-20 Improper Input Validation weakness
  • CWE-306 Missing Authentication for Critical Functionality weakness
  • CWE-918 Server-Side Request Forgery weakness

References