CVE-2014-7190: Openfiler

Medium severity, CVSS 6.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in Openfiler 2.99.1 allow remote attackers to hijack the authentication of administrators for requests that (1) shutdown or (2) reboot the server via a request to admin/system_shutdown.html.

Affected products

Published 2014-09-30. Last modified 2026-06-17.