What’s Vulnerable › Products

File Provider vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your File Provider version is affected

Latest File Provider vulnerabilities

• CVE-2025-4580 — File Provider <= 1.2.3 - Item Deletion via CSRF (CVSS 4.3)
• CVE-2025-4578 — File Provider <= 1.2.3 - Unauthenticated SQLi (CVSS 9.8)