CVE-2017-14738: Filerun

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).

Affected products

• Filerun Filerun: up to and including 2017.09.18

Published 2017-09-30. Last modified 2026-06-17.