2 matches found
CVE-2026-62843
File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.63.6 to 2.63.16, File Browser's archive builder uses strings.ReplaceAllnameInArchive, "", "/", which turns a POSIX filename such as ....\evil.sh into the...
6.8CVSS6.1AI score0.00259EPSS
SaveExploits0References4Affected Software1
PT-2026-60214
Name of the Vulnerable Software and Affected Versions File Browser versions 2.63.6 through 2.63.16 Description The archive builder improperly handles filenames by using strings.ReplaceAllnameInArchive, "", "/". This allows a user with upload permissions to create a file with backslashes in the...
6.8CVSS5.2AI score0.00259EPSS
SaveExploits0
20