CVE-2015-4463: Efrontlearning Efront

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The file_manager component in eFront CMS before 3.6.15.5 allows remote authenticated users to bypass intended file-upload restrictions by appending a crafted parameter to the file URL.

Affected products

• Efrontlearning Efront: up to and including 3.6.15.4

Published 2017-07-25. Last modified 2026-06-17.