Lucene search
K

548 matches found

OSV
OSV
added 2025/11/17 7:11 p.m.5 views

GO-2025-4118 File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency in github.com/filebrowser/filebrowser

File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency in github.com/filebrowser/filebrowser...

9.1CVSS6.9AI score0.00682EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/11/13 11:8 p.m.3 views

CVE-2025-64523

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Versions prior to 2.45.1 have an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. Th...

7.2CVSS6.6AI score0.00376EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/13 10:36 p.m.2 views

EUVD-2025-180210

File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency...

9.1CVSS6.5AI score0.00682EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2025/11/13 10:36 p.m.25 views

File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency

The standard library net/http package dependency used by File Browser improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. I can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a...

9.1CVSS7AI score0.00682EPSS
Exploits0References3Affected Software1
Snyk
Snyk
added 2025/11/13 10:34 p.m.4 views

Improper Authorization

Overview github.com/filebrowser/filebrowser/v2/http is a web file browser. Affected versions of this package are vulnerable to Improper Authorization via the shareDeleteHandler function, which handles deletion requests based solely on the share hash, and does not verify whether the link.UserID...

8.8CVSS6.8AI score0.00376EPSS
Exploits1References2
EUVD
EUVD
added 2025/11/13 10:34 p.m.5 views

EUVD-2025-150363

File Browser is Vulnerable to Insecure Direct Object Reference IDOR in Share Deletion Function...

7.2CVSS6.3AI score0.00376EPSS
Exploits1References3
OSV
OSV
added 2025/11/13 10:34 p.m.3 views

GHSA-6CQF-CFHV-659G File Browser is Vulnerable to Insecure Direct Object Reference (IDOR) in Share Deletion Function

Summary It has been found an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. This vulnerability allows any authenticated user with share permissions to delete other users' shared links without authorization checks. The impact is...

8.8CVSS6.5AI score0.00376EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2025/11/13 10:34 p.m.10 views

File Browser is Vulnerable to Insecure Direct Object Reference (IDOR) in Share Deletion Function

Summary It has been found an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. This vulnerability allows any authenticated user with share permissions to delete other users' shared links without authorization checks. The impact is...

8.8CVSS6.6AI score0.00376EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2025/11/12 11:15 p.m.3 views

CVE-2025-64523

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Versions prior to 2.45.1 have an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. Th...

8.8CVSS0.00376EPSS
Exploits1References2
OSV
OSV
added 2025/11/12 10:11 p.m.4 views

CVE-2025-64523 FileBrowser has Insecure Direct Object Reference (IDOR) in Share Deletion Function

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Versions prior to 2.45.1 have an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. Th...

7.2CVSS6.5AI score0.00376EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/11/12 12:0 a.m.5 views

PT-2025-46766

Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.45.1 Description File Browser provides a file managing interface for tasks like uploading, deleting, previewing, renaming, and editing files. An Insecure Direct Object Reference IDOR exists in the application's...

8.8CVSS6.5AI score0.00376EPSS
Exploits1References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-8358

Malware in sbrugna...

5.3CVSS5.5AI score0.02503EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2011-4749

Malware in sbrugna...

4CVSS6.4AI score0.02745EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2004-2279

Malware in sbrugna...

5CVSS6.4AI score0.02722EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-2436

Malware in sbrugna...

6.5CVSS6.6AI score0.01424EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2008-6312

Malware in sbrugna...

5CVSS6.4AI score0.01205EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2011-2634

Malware in sbrugna...

7.5CVSS6.4AI score0.02657EPSS
Exploits0References7
Fedora
Fedora
added 2025/10/06 1:12 a.m.10 views

[SECURITY] Fedora 42 Update: jupyterlab-4.4.9-1.fc42

JupyterLab is the next-generation user interface for Project Jupyter offering all the familiar building blocks of the classic Jupyter Notebook notebook, terminal, text editor, file browser, rich outputs, etc. in a flexible and powerful user interface...

4.3CVSS6.9AI score0.0021EPSS
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-54916

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00188EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-3533

Malicious code in bioql PyPI...

9.9CVSS8.7AI score0.00627EPSS
Exploits0References1
Rows per page
Query Builder