CVE-2018-16477

score

<0.1

cvss

6.5

epss

1.3%

published

2018-11-30

kev added

—

first seen

2026-10-21

Active Storage >= 5.2.0 for Google Cloud Storage and Disk services contains a bypass caused by modification of 'content-disposition' and 'content-type' parameters, letting attackers execute HTML files inline and potentially access private signed URLs, exploit requires attacker to modify these parameters.