Lucene search
+L

885 matches found

osv_go
osv_go
•added 2025/07/28 7:57 p.m.•17 views

GO-2025-3792 File Browser vulnerable to insecure password handling in github.com/filebrowser/filebrowser

File Browser vulnerable to insecure password handling in github.com/filebrowser/filebrowser...

7.5CVSS5.7AI score0.0054EPSS
SaveExploits1References3
osv_go
osv_go
•added 2025/07/28 7:57 p.m.•12 views

GO-2025-3790 File Browser's password protection of links is bypassable in github.com/filebrowser/filebrowser

File Browser's password protection of links is bypassable in github.com/filebrowser/filebrowser...

4.3CVSS5.5AI score0.00389EPSS
SaveExploits1References3
osv_go
osv_go
•added 2025/07/28 7:57 p.m.•61 views

GO-2025-3812 File Browser’s insecure JWT handling can lead to session replay attacks after logout in github.com/filebrowser/filebrowser

File Browser’s insecure JWT handling can lead to session replay attacks after logout in github.com/filebrowser/filebrowser...

9.8CVSS5.7AI score0.00552EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/07/17 6:55 p.m.•24 views

CVE-2025-53826

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.39.0, File Browser’s authentication system issues long-lived JWT tokens that remain valid even after the user logs out. As of time of...

9.8CVSS5.7AI score0.00552EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/07/17 6:00 p.m.•19 views

CVE-2025-53893

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.38.0, a Denial of Service DoS vulnerability exists in the file processing logic when reading a file on endpoint...

8.7CVSS5.7AI score0.00406EPSS
SaveExploits1References1
NVD
NVD
•added 2025/07/15 6:15 p.m.•38 views

CVE-2025-53826

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.39.0, File Browser’s authentication system issues long-lived JWT tokens that remain valid even after the user logs out. As of time of...

9.8CVSS0.00552EPSS
SaveExploits1References2
NVD
NVD
•added 2025/07/15 6:15 p.m.•25 views

CVE-2025-53893

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.38.0, a Denial of Service DoS vulnerability exists in the file processing logic when reading a file on endpoint...

8.7CVSS0.00406EPSS
SaveExploits1References2
Mend
Mend
•added 2025/07/15 6:12 p.m.•8 views

CVE-2025-53826

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.39.0, File Browser’s authentication system issues long-lived JWT tokens that remain valid even after the user logs out. As of time of...

9.8CVSS5.7AI score0.00552EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/07/15 6:12 p.m.•53 views

CVE-2025-53826 FileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after Logout

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.39.0, File Browser’s authentication system issues long-lived JWT tokens that remain valid even after the user logs out. As of time of...

8.7CVSS0.00552EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/07/15 6:12 p.m.•14 views

CVE-2025-53826 FileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after Logout

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.39.0, File Browser’s authentication system issues long-lived JWT tokens that remain valid even after the user logs out. As of time of...

8.7CVSS5.7AI score0.00552EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/07/15 6:12 p.m.•12 views

CVE-2025-53826 FileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after Logout

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.39.0, File Browser’s authentication system issues long-lived JWT tokens that remain valid even after the user logs out. As of time of...

8.7CVSS5.7AI score0.00552EPSS
SaveExploits1References4
CVE
CVE
•added 2025/07/15 5:47 p.m.•51 views

CVE-2025-53893

CVE-2025-53893 affects the filebrowser/filebrowser 2.38.0 DoS vulnerability where the server loads entire file content into memory during reads (e.g., /files/{file-name} or /api/resources/{file-name}) without size checks, enabling an authenticated user to trigger memory exhaustion and potentially...

8.7CVSS5.7AI score0.00406EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2025/07/15 5:47 p.m.•29 views

CVE-2025-53893 File Browser Vulnerable to Uncontrolled Memory Consumption Due to Oversized File Processing

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.38.0, a Denial of Service DoS vulnerability exists in the file processing logic when reading a file on endpoint...

8.7CVSS0.00406EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/07/15 5:47 p.m.•16 views

CVE-2025-53893 File Browser Vulnerable to Uncontrolled Memory Consumption Due to Oversized File Processing

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.38.0, a Denial of Service DoS vulnerability exists in the file processing logic when reading a file on endpoint...

8.7CVSS6.5AI score
SaveExploits0References4
Mend
Mend
•added 2025/07/15 5:47 p.m.•12 views

CVE-2025-53893

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.38.0, a Denial of Service DoS vulnerability exists in the file processing logic when reading a file on endpoint...

8.7CVSS5.7AI score0.00406EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/07/15 12:00 a.m.•8 views

PT-2025-29583 · Unknown · Filebrowser

Name of the Vulnerable Software and Affected Versions: File Browser version 2.38.0 Description: File Browser provides a file managing interface for managing files within a specified directory, including upload, delete, preview, rename, and edit functionalities. A denial-of-service issue exists in...

8.7CVSS5.6AI score0.00406EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/15 12:00 a.m.•2 views

CVE-2025-53893: Uncontrolled Resource Consumption

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.38.0, a Denial of Service DoS vulnerability exists in the file processing logic when reading a file on endpoint...

8.7CVSS5.7AI score0.00406EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/15 12:00 a.m.•6 views

CVE-2025-53826: Authentication Bypass by Primary Weakness

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.39.0, File Browser’s authentication system issues long-lived JWT tokens that remain valid even after the user logs out. As of time of...

9.8CVSS5.7AI score0.00552EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/07/15 12:00 a.m.•10 views

PT-2025-29588

Name of the Vulnerable Software and Affected Versions File Browser version 2.39.0 Description File Browser provides a file managing interface within a specified directory, allowing users to upload, delete, preview, rename, and edit files. The authentication system in version 2.39.0 issues...

9.8CVSS6.5AI score0.00822EPSS
SaveExploits4References69
CNVD
CNVD
•added 2025/07/04 12:00 a.m.•37 views

FileBrowser Command Injection Vulnerability (CNVD-2025-22706)

FileBrowser is an open source web file browser . Provides a file management interface in a specified directory , can be used to upload , delete , preview , rename and edit your files . FileBrowser suffers from a command injection vulnerability, which is caused by a flaw in the command execution...

8CVSS6.9AI score0.00635EPSS
SaveExploits1References1
Rows per page
Query Builder