Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2026/04/08 12:5 a.m.10 views

File Browser: Proxy auth auto-provisioned users inherit Execute permission and Commands

Summary The fix in commit b6a4fb1 "self-registered users don't get execute perms" stripped Execute permission and Commands from users created via the signup handler. The same fix was not applied to the proxy auth handler. Users auto-created on first successful proxy-auth login are granted executi...

8.8CVSS6.1AI score0.00383EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2026/04/07 4:31 p.m.5 views

CVE-2026-35607 File Browser: Proxy auth auto-provisioned users inherit Execute permission and Commands

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the fix in commit b6a4fb1 "self-registered users don't get execute perms" stripped Execute permission and Commands from users created via the...

8.1CVSS6.2AI score0.00383EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2026/04/07 4:31 p.m.19 views

CVE-2026-35607 File Browser: Proxy auth auto-provisioned users inherit Execute permission and Commands

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.1, the fix in commit b6a4fb1 "self-registered users don't get execute perms" stripped Execute permission and Commands from users created via the...

8.1CVSS0.00383EPSS
SaveExploits1References2
Rows per page
Query Builder