Lucene search
+L

6 matches found

osv_ghsa
osv_ghsa
•added 2026/02/10 12:22 a.m.•21 views

GHSA-HXW8-4H9J-HQ2R File Browser has an Authentication Bypass in User Password Update

Security Advisory: Authentication Bypass in User Password Update Summary A case-sensitivity flaw in the password validation logic allows any authenticated user to change their password or an admin to change any user's password without providing the current password. By using Title Case field name...

5.4CVSS8.3AI score0.00366EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2026/02/10 12:22 a.m.•27 views

File Browser has an Authentication Bypass in User Password Update

Security Advisory: Authentication Bypass in User Password Update Summary A case-sensitivity flaw in the password validation logic allows any authenticated user to change their password or an admin to change any user's password without providing the current password. By using Title Case field name...

5.4CVSS8.3AI score0.00366EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/02/09 9:18 p.m.•5 views

CVE-2026-25889 File Browser has an Authentication Bypass in User Password Update

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, a case-sensitivity flaw in the password validation logic allows any authenticated user to change their password or an admin to change...

5.4CVSS8.1AI score0.00366EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/02/09 9:18 p.m.•24 views

CVE-2026-25889 File Browser has an Authentication Bypass in User Password Update

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, a case-sensitivity flaw in the password validation logic allows any authenticated user to change their password or an admin to change...

5.4CVSS8.1AI score0.00366EPSS
SaveExploits1References5
Mend
Mend
•added 2026/02/09 9:18 p.m.•11 views

CVE-2026-25889

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, a case-sensitivity flaw in the password validation logic allows any authenticated user to change their password or an admin to change...

5.4CVSS8.1AI score0.00366EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/02/09 9:18 p.m.•52 views

CVE-2026-25889 File Browser has an Authentication Bypass in User Password Update

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, a case-sensitivity flaw in the password validation logic allows any authenticated user to change their password or an admin to change...

5.4CVSS0.00366EPSS
SaveExploits1References3
Rows per page
Query Builder