What is GHSA-474p-wmhw-pxfq?

GHSA-474p-wmhw-pxfq is a security advisory published by GitHub Security Advisories with Medium severity. In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound...

Which CVE IDs does GHSA-474p-wmhw-pxfq cover?

GHSA-474p-wmhw-pxfq covers the following CVE IDs: CVE-2026-93693. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-474p-wmhw-pxfq?

GHSA-474p-wmhw-pxfq has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-474p-wmhw-pxfqMediumCVSS 6.5

In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound...

Vendor

GitHub Security Advisories

Published

October 12, 2026

Last Modified

October 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-93693 →

📋 Description

In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insufficient validation on queue service can be chained by a remote unauthenticated attacker to issue server-side requests to unintended local handlers and perform unauthorized queue operations.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-93693
https://docs.sharefile.com/en-us/sharefile/storage-zones-controller/5-0/security-vulnerability-sep26
https://github.com/advisories/GHSA-474p-wmhw-pxfq