CVE-2024-45186: Filesender

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

FileSender before 2.49 allows server-side template injection (SSTI) for retrieving credentials.

Affected products

• Filesender Filesender: before 2.49 (fixed in 2.49)

Published 2024-10-02. Last modified 2026-06-17.