Lucene search
+L

3 matches found

OSV
OSV
added 2026/02/25 11:7 p.m.12 views

GO-2026-4546 FileBrowser Quantum: Password Protection Not Enforced on Shared File Links in github.com/gtsteffaniak/filebrowser/backend

FileBrowser Quantum: Password Protection Not Enforced on Shared File Links in github.com/gtsteffaniak/filebrowser/backend...

7.1CVSS5.5AI score0.00307EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2026/02/25 4:0 p.m.13 views

FileBrowser Quantum: Password Protection Not Enforced on Shared File Links

Summary When users share password-protected files, the recipient can completely bypass the password and still download the file. Details This happens because the API returns a direct download link in the details of the share, which is accessible to anyone with JUST THE SHARE LINK, even without th...

7.1CVSS5.5AI score0.00307EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2026/02/25 4:0 p.m.6 views

GHSA-8VRH-3PM2-V4V6 FileBrowser Quantum: Password Protection Not Enforced on Shared File Links

Summary When users share password-protected files, the recipient can completely bypass the password and still download the file. Details This happens because the API returns a direct download link in the details of the share, which is accessible to anyone with JUST THE SHARE LINK, even without th...

7.1CVSS5.6AI score0.00307EPSS
SaveExploits1References6
Rows per page
Query Builder