PT-2025-27473

🗓️ 25 Mar 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 9 Views

Vulnerability in File Browser prior to 2.33.10 allows unauthorized shell command execution.

Reporter	Title	Published	Views	Family All 473
attackerkb	CVE-2025-64111	6 Feb 202616:58	–	attackerkb
AlpineLinux	CVE-2025-52893	25 Jun 202516:54	–	alpinelinux
AlpineLinux	CVE-2025-52894	25 Jun 202516:59	–	alpinelinux
GithubExploit	Exploit for Path Traversal in Ctfer-Io Chall-Manager	22 Aug 202512:37	–	githubexploit
BDU FSTEC	The vulnerability of the ACL-policy search mechanism based on application prefixing by the Nomad orchestrator allows attackers to bypass existing security mechanisms.	16 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Mattermost instant messaging application, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.	26 Jun 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Command Execution function in the file manager for managing files and directories in the File Browser allows a hacker to gain access to read and modify files.	4 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web manager for managing files and directories in File Browser, related to the use of default user accounts, allows a perpetrator to execute a brute-force attack.	4 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web manager for managing files and directories in File Browser, related to the lack of measures taken at the management level to clean up data, allows a perpetrator to execute arbitrary commands.	4 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web manager responsible for managing files and directories in File Browser, related to bypassing authentication due to a bug in its original implementation, allows an intruder to gain unauthorized access to protected information.	6 Jan 202600:00	–	bdu_fstec

Source	Link
t	www.t.me/cvetracker/27459
suse	www.suse.com/security/cve/CVE-2025-52477
suse	www.suse.com/security/cve/CVE-2025-6023
suse	www.suse.com/security/cve/CVE-2025-53634
suse	www.suse.com/security/cve/CVE-2025-53633
suse	www.suse.com/security/cve/CVE-2025-52900
suse	www.suse.com/security/cve/CVE-2025-52904
github	www.github.com/filebrowser/filebrowser/releases/tag/v2.33.10
twitter	www.twitter.com/autumn_good_35/status/1940047469007839259
suse	www.suse.com/security/cve/CVE-2025-52903

04 Aug 2025 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.18 - 10

CVSS 48.8

EPSS0.0115

SSVC

file browser vulnerability shell commands unauthorized access update required versions affected