CVE-2018-18867: Tecrail Responsive Filemanager

High severity, CVSS 8.6. EPSS: 1.5% chance of exploitation in the next 30 days.

An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix for CVE-2018-15495.

Affected products

• Tecrail Responsive Filemanager: version 9.13.4 only

Published 2018-10-31. Last modified 2026-06-17.