TAGFREE vulnerabilities
We track 2 vulnerabilities in TAGFREE products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2025.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest TAGFREE vulnerabilities
- 8.8 High severity
X-Free Uploader: External Control of File Name or Path
: External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU allows : Parameter Injection.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, from 2.0.1.0034 before 2.0.1.0035.
- 8.7 High severity
X-Free Uploader: Improper Limitation of a Pathname to a Restricted Directory
: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TAGFREE X-Free Uploader XFU allows Path Traversal.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, from 2.0.1.0034 before 2.0.1.0035.