In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).
- https://herolab.usd.de/security-advisories/
No PoCs found on GitHub currently.