In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).
CWE-352