Seafile vulnerabilities

Products

• Seafile 6
• Server 4

Newest

• seafile server Seafile Server has multiple stored XSS vulnerabilities CVE-2026-30587 Fix available 8.7 HighMarch 25, 2026
• seafile Multiple vulnerabilities in Seafile CVE-2025-41080 5.1 MediumDecember 4, 2025
• seafile Multiple vulnerabilities in Seafile CVE-2025-41079 5.1 MediumDecember 4, 2025
• seafile server A stored cross-site scripting (XSS) vulnerability was discovered in Seafile Community Edition... CVE-2025-65516 6.1 MediumDecember 4, 2025
• seafile The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect... CVE-2023-28874 6.1 MediumDecember 9, 2023
• seafile An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript... CVE-2023-28873 5.4 MediumDecember 9, 2023
• seafile server, haiwen seafile-server +1 more Permissions check bypass in Seafile CVE-2021-43820 7.4 HighDecember 14, 2021
• seafile Seafile 7.0.5 (2019) allows Persistent XSS via the "share of library functionality." CVE-2021-30146 Public exploit 5.4 MediumApril 6, 2021
• seafile seafile-client The seafile-client client 7.0.8 for Seafile is vulnerable to DLL hijacking because it loads... CVE-2020-16143 7.8 HighJuly 29, 2020
• seafile Seafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block Chaining... CVE-2013-7469 Fix available 7.5 HighFebruary 21, 2019
• seafile seadroid The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the... CVE-2019-8919 7.5 HighFebruary 18, 2019
• seafile server Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to... CVE-2014-5443 7.8 HighMarch 19, 2018