Filebrowser

Filebrowser

16 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8

CVE-2025-52904

Medienbericht Exploit
  • EPSS 0.25%
  • Veröffentlicht 26.06.2025 18:21:03
  • Zuletzt bearbeitet 05.08.2025 18:25:10

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In version 2.32.0 of the web application, all users have a scope assigned, and they only have access to...

8

CVE-2025-52903

Medienbericht Exploit
  • EPSS 0.29%
  • Veröffentlicht 26.06.2025 18:16:32
  • Zuletzt bearbeitet 05.08.2025 18:23:52

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In version 2.32.0, the Command Execution feature of File Browser only allows the execution of shell com...

5.4

CVE-2025-52902

Medienbericht Exploit
  • EPSS 0.02%
  • Veröffentlicht 26.06.2025 14:37:45
  • Zuletzt bearbeitet 10.07.2025 01:09:35

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. The Markdown preview function of File Browser prior to v2.33.7 is vulnerable to Stored Cross-Site-Scrip...

5.5

CVE-2025-52900

Medienbericht Exploit
  • EPSS 0.02%
  • Veröffentlicht 26.06.2025 14:35:50
  • Zuletzt bearbeitet 10.07.2025 01:17:03

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. The file access permissions for files uploaded to or created from File Browser are never explicitly set...

9

CVE-2023-39612

Exploit
  • EPSS 0.13%
  • Veröffentlicht 16.09.2023 01:15:07
  • Zuletzt bearbeitet 27.03.2025 14:42:46

A cross-site scripting (XSS) vulnerability in FileBrowser before v2.23.0 allows an authenticated attacker to escalate privileges to Administrator via user interaction with a crafted HTML file or URL.

8.8

CVE-2021-46398

Exploit
  • EPSS 10.35%
  • Veröffentlicht 04.02.2022 16:15:07
  • Zuletzt bearbeitet 21.11.2024 06:34:02

A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor user with admin privilege and get access to the filesystem via a malicious HTML webpage that is sent to the victim. An admin can run ...