Seafile Server

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-65516 MEDIUM This Month

A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. When Seafile is configured with the Golang file server, an attacker can upload a crafted SVG file containing malicious JavaScript and share it using a public link. Opening the link triggers script execution in the victim's browser. This issue has been fixed in Seafile Community Edition 13.0.12.

XSS Debian Seafile Server Suse

NVD GitHub

CVSS 3.1

6.1

EPSS

0.0%

CVE-2021-43820 MEDIUM PATCH This Month

Seafile is an open source cloud storage system. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Seafile Server

NVD GitHub

CVSS 3.1

5.9

EPSS

1.0%

CVE-2025-65516

EPSS 0% CVSS 6.1

MEDIUM This Month

XSS Debian Seafile Server +1

NVD GitHub

CVE-2021-43820

EPSS 1% CVSS 5.9

MEDIUM PATCH This Month

Seafile is an open source cloud storage system. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Seafile Server

NVD GitHub