Advisories · Technology
filebrowser.
Every CVE that names filebrowser among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.6 High
File Browser through 2.63.23 Path Traversal via Symlink Alias
- filebrowser
- Path traversal
- CVSS 7.2 High
File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup
- filebrowser
- Broken access control
- CVSS 7.1 High
File Browser through 2.63.23 Memory Exhaustion via subtitle endpoint
- filebrowser
- Denial of service
- CVSS 7.1 High
filebrowser through 2.63.23 Denial of Service via unbounded WebSocket message
- filebrowser
- Denial of service
- CVSS 2.3 Low
filebrowser 2.24.0 Race Condition via TUS concurrent PATCH uploads
- filebrowser
- Race condition
- CVSS 2.3 Low
filebrowser through 2.63.23 Stale Share Link via File Rename
- filebrowser
- CWE-459
- CVSS 2.3 Low
File Browser 2.63.6 through 2.63.23 Share Link Exposure via File Deletion
- filebrowser
- CWE-459
- CVSS 8.2 High
filebrowser through 2.63.23 Denial of Service via named pipes
- filebrowser
- Denial of service
- CVSS 7.1 High
FileBrowser before 2.63.19 Disk Exhaustion via TUS Upload
- filebrowser
- Denial of service
- CVSS 8.7 High
File Browser before 2.63.20 Privilege Escalation via Proxy Authentication
- filebrowser
- Broken access control
- CVSS 9.2 CriticalCritical · CVSS 9+
FileBrowser before 2.63.19 Case Sensitivity Authentication Bypass
- filebrowser
- CWE-178
- CVSS 7.6 High
filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalization
- filebrowser
- CWE-41
- CVSS 5.3 Medium
filebrowser before 2.63.19 Permission Bypass via checksum
- filebrowser
- Information disclosure
- CVSS 9.3 CriticalCritical · CVSS 9+
filebrowser through 2.63.16 Privilege Escalation via Signup
- filebrowser
- Privilege escalation
- CVSS 7.2 High
filebrowser before 2.63.19 Out-of-Scope File Deletion via Symlink
- filebrowser
- Path traversal
- CVSS 8.6 High
File Browser before v2.63.22 Authorization Bypass via Recursive Operations
- filebrowser
- Broken access control
- CVSS 7.6 High
File Browser 2.50.0 through 2.63.21 JWT Expiration Bypass
- filebrowser
- Authentication bypass
- CVSS 3.1 Low
File Browser: Trailing-slash delete leaves a stale public share behind
- filebrowser
- Broken access control
- CVSS 2.3 Low
filebrowser before 2.63.17 Stale Public Share via Trailing-Slash Delete
- filebrowser
- Broken access control