Filebrowser

Filebrowser

57 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.9

CVE-2026-34530

Exploit
  • EPSS 0.36%
  • Veröffentlicht 01.04.2026 20:41:08
  • Zuletzt bearbeitet 06.04.2026 20:34:21

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to version 2.62.2, the SPA index page in File Browser is vulnerable to Stored Cross-Site Scripting (XSS) vi...

9.8

CVE-2026-34528

Exploit
  • EPSS 0.65%
  • Veröffentlicht 01.04.2026 20:39:32
  • Zuletzt bearbeitet 06.04.2026 20:41:19

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to version 2.62.2, the signupHandler in File Browser applies default user permissions via d.settings.Defaul...

9

CVE-2026-34529

Exploit
  • EPSS 0.32%
  • Veröffentlicht 01.04.2026 20:39:07
  • Zuletzt bearbeitet 06.04.2026 20:39:47

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to version 2.62.2, the EPUB preview function in File Browser is vulnerable to Stored Cross-Site Scripting (...

6.5

CVE-2026-32761

Exploit
  • EPSS 0.42%
  • Veröffentlicht 19.03.2026 23:45:33
  • Zuletzt bearbeitet 23.03.2026 16:56:04

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Versions 2.61.0 and below contain a permission enforcement bypass which allows users who are denied download priv...

9.8

CVE-2026-32760

Exploit
  • EPSS 0.67%
  • Veröffentlicht 19.03.2026 23:39:54
  • Zuletzt bearbeitet 23.03.2026 16:54:48

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. In versions 2.61.2 and below, any unauthenticated visitor can register a full administrator account when self-reg...

8.1

CVE-2026-32759

Exploit
  • EPSS 1.9%
  • Veröffentlicht 19.03.2026 23:31:51
  • Zuletzt bearbeitet 09.06.2026 13:16:35

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. In versions on the 2.x branch prior to 2.33.8, the TUS resumable upload handler parses the Upload-Length header a...

6.5

CVE-2026-32758

  • EPSS 0.39%
  • Veröffentlicht 19.03.2026 23:22:19
  • Zuletzt bearbeitet 23.03.2026 16:55:20

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Versions 2.61.2 and below are vulnerable to Path Traversal through the resourcePatchHandler (http/resource.go). T...

5.4

CVE-2026-30934

Exploit
  • EPSS 0.35%
  • Veröffentlicht 10.03.2026 16:12:23
  • Zuletzt bearbeitet 18.03.2026 16:52:51

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, Stored XSS is possible via share metadata fields (e.g., title, description) that are rendered into HTML for /public/share/<hash> without context...

7.5

CVE-2026-30933

Exploit
  • EPSS 0.54%
  • Veröffentlicht 10.03.2026 16:10:56
  • Zuletzt bearbeitet 18.03.2026 17:13:34

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, the remediation for CVE-2026-27611 is incomplete. Password protected shares still disclose tokenized downloadURL via /public/api/share/info. Thi...

6.5

CVE-2026-28492

Exploit
  • EPSS 0.32%
  • Veröffentlicht 05.03.2026 21:06:21
  • Zuletzt bearbeitet 10.03.2026 19:34:55

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.61.0, when a user creates a public share link for a directory, the withHashFile midd...