Filecodebox vulnerabilities

2 known vulnerabilities in Filecodebox from Lanol. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Filecodebox: Authentication Bypass by Primary Weakness

  CVE-2025-51663Nov 19, 2025Lanol

  A vulnerability found in IPRateLimit implementation of FileCodeBox up to 2.2 allows remote attackers to bypass ip-based rate limit protection and failed attempt restrictions by faking X-Real-IP and X-Forwarded-For HTTP headers. This can enable attackers to per

• 7.5 High severity

  Filecodebox: Path Traversal: '../filedir'

  CVE-2025-51661Nov 19, 2025Lanol

  A path Traversal vulnerability found in FileCodeBox v2.2 and earlier allows arbitrary file writes when application is configured to use local filesystem storage. SystemFileStorage.save_file method in core/storage.py uses filenames from user input without valid