Lucene search
+L

3 matches found

OSV
OSV
added 2026/02/25 11:7 p.m.15 views

GO-2026-4546 FileBrowser Quantum: Password Protection Not Enforced on Shared File Links in github.com/gtsteffaniak/filebrowser/backend

FileBrowser Quantum: Password Protection Not Enforced on Shared File Links in github.com/gtsteffaniak/filebrowser/backend...

7.1CVSS5.5AI score0.00307EPSS
SaveExploits1References4
OSV
OSV
added 2026/02/25 4:0 p.m.13 views

GHSA-8VRH-3PM2-V4V6 FileBrowser Quantum: Password Protection Not Enforced on Shared File Links

Summary When users share password-protected files, the recipient can completely bypass the password and still download the file. Details This happens because the API returns a direct download link in the details of the share, which is accessible to anyone with JUST THE SHARE LINK, even without th...

7.1CVSS5.6AI score0.00307EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2026/02/25 4:0 p.m.14 views

FileBrowser Quantum: Password Protection Not Enforced on Shared File Links

Summary When users share password-protected files, the recipient can completely bypass the password and still download the file. Details This happens because the API returns a direct download link in the details of the share, which is accessible to anyone with JUST THE SHARE LINK, even without th...

7.1CVSS5.5AI score0.00307EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder