Vulnerabilidades em filebrowser

61 resultados
Análise Vexday

O filebrowser apresenta um volume significativo de vulnerabilidades (43 CVEs) com concentração recente: 15 publicadas nos últimos 90 dias. Embora nenhuma esteja sob exploração ativa conhecida, 4 vulnerabilidades críticas foram registradas, sendo a falha de controle de acesso (CWE-863) o padrão dominante. O risco é moderado e em evolução, exigindo monitoramento atento das correções disponibilizadas.

CVE-2026-73612HIGHFile Browser before v2.63.22 Authorization Bypass via Recursive OperationsEPSS 0.3%CVE-2026-25889MEDIUMFile Browser has an Authentication Bypass in User Password UpdateEPSS 0.3%CVE-2026-73611HIGHFile Browser 2.50.0 through 2.63.21 JWT Expiration BypassEPSS 0.3%CVE-2026-35604HIGHFile Browser share links remain accessible after Share/Download permissions are revokedEPSS 0.3%CVE-2026-28492HIGHFile Browser: Path Traversal in Public Share Links Exposes Files Outside Shared DirectoryEPSS 0.3%CVE-2026-34529HIGHFile Browser is vulnerable to Stored Cross-site Scripting via crafted EPUB fileEPSS 0.3%CVE-2026-62683LOWFile Browser: Trailing-slash delete leaves a stale public share behindEPSS 0.3%CVE-2026-61874LOWfilebrowser before 2.63.17 Stale Public Share via Trailing-Slash DeleteEPSS 0.3%CVE-2025-52902HIGHFile Browser has Stored Cross-Site Scripting vulnerabilityEPSS 0.3%CVE-2026-90928HIGHFile Browser through 2.63.23 Memory Exhaustion via subtitle endpointEPSS 0.3%CVE-2026-90929HIGHFile Browser 2.5.0 Directory Deletion via Upload Failure CleanupEPSS 0.3%CVE-2026-72837HIGHFile Browser before 2.63.20 Privilege Escalation via Proxy AuthenticationEPSS 0.3%CVE-2026-72838HIGHFileBrowser before 2.63.19 Disk Exhaustion via TUS UploadEPSS 0.3%CVE-2026-82236LOWFile Browser 2.63.6 through 2.63.23 Share Link Exposure via File DeletionEPSS 0.3%CVE-2026-90927HIGHfilebrowser through 2.63.23 Denial of Service via unbounded WebSocket messageEPSS 0.2%CVE-2026-72834MEDIUMfilebrowser before 2.63.19 Permission Bypass via checksumEPSS 0.2%CVE-2025-52900MEDIUMFile Browser has Insecure File PermissionsEPSS 0.2%CVE-2026-54093MEDIUMFile Browser: Path traversal in download-as-zip/tar via Windows-style backslash separators in stored filenamesEPSS 0.2%CVE-2026-54096HIGHFile Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent PathEPSS 0.2%CVE-2026-82238LOWfilebrowser 2.24.0 Race Condition via TUS concurrent PATCH uploadsEPSS 0.2%