CVE-2021-43397: Liquidfiles

High severity, CVSS 8.8. EPSS: 3.8% chance of exploitation in the next 30 days.

LiquidFiles before 3.6.3 allows remote attackers to elevate their privileges from Admin (or User Admin) to Sysadmin.

Affected products

• Liquidfiles Liquidfiles: before 3.6.3 (fixed in 3.6.3)

Published 2021-11-11. Last modified 2026-06-17.