Filebrowser

Filebrowser

32 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2026-32759

Exploit
  • EPSS 0.18%
  • Veröffentlicht 19.03.2026 23:31:51
  • Zuletzt bearbeitet 23.03.2026 16:54:09

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. In versions 2.61.2 and below, the TUS resumable upload handler parses the Upload-Length header as a signed 64-bit...

6.5

CVE-2026-32758

  • EPSS 0.01%
  • Veröffentlicht 19.03.2026 23:22:19
  • Zuletzt bearbeitet 23.03.2026 16:55:20

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Versions 2.61.2 and below are vulnerable to Path Traversal through the resourcePatchHandler (http/resource.go). T...

5.4

CVE-2026-30934

Exploit
  • EPSS 0.04%
  • Veröffentlicht 10.03.2026 16:12:23
  • Zuletzt bearbeitet 18.03.2026 16:52:51

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, Stored XSS is possible via share metadata fields (e.g., title, description) that are rendered into HTML for /public/share/<hash> without context...

7.5

CVE-2026-30933

Exploit
  • EPSS 0.08%
  • Veröffentlicht 10.03.2026 16:10:56
  • Zuletzt bearbeitet 18.03.2026 17:13:34

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, the remediation for CVE-2026-27611 is incomplete. Password protected shares still disclose tokenized downloadURL via /public/api/share/info. Thi...

6.5

CVE-2026-28492

Exploit
  • EPSS 0.04%
  • Veröffentlicht 05.03.2026 21:06:21
  • Zuletzt bearbeitet 10.03.2026 19:34:55

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.61.0, when a user creates a public share link for a directory, the withHashFile midd...

8.1

CVE-2026-29188

Exploit
  • EPSS 0.02%
  • Veröffentlicht 05.03.2026 20:57:57
  • Zuletzt bearbeitet 10.03.2026 19:42:36

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.61.1, a broken access control vulnerability in the TUS protocol DELETE endpoint allo...

8.1

CVE-2026-25890

Exploit
  • EPSS 0.01%
  • Veröffentlicht 09.02.2026 21:21:50
  • Zuletzt bearbeitet 20.02.2026 20:31:02

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, an authenticated user can bypass the application's "Disallow" file path rules by modif...

5.4

CVE-2026-25889

Exploit
  • EPSS 0.01%
  • Veröffentlicht 09.02.2026 21:18:13
  • Zuletzt bearbeitet 23.02.2026 17:55:17

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, a case-sensitivity flaw in the password validation logic allows any authenticated user...

5.3

CVE-2026-23849

Exploit
  • EPSS 0.2%
  • Veröffentlicht 19.01.2026 20:37:29
  • Zuletzt bearbeitet 03.02.2026 14:30:45

File Browser provides a file managing interface within a specified directory and can be used to upload, delete, preview, rename, and edit files. Prior to version 2.55.0, the JSONAuth. Auth function contains a logic flaw that allows unauthenticated at...

8.8

CVE-2025-64523

Exploit
  • EPSS 0.09%
  • Veröffentlicht 12.11.2025 22:11:36
  • Zuletzt bearbeitet 03.02.2026 14:35:31

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Versions prior to 2.45.1 have an Insecure Direct Object Reference (IDOR) vulnerability in the FileBrows...