Lucene search
+L

3 matches found

SUSE CVE
SUSE CVE
added 2026/07/30 4:35 p.m.7 views

SUSE CVE-2026-62685

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, File Browser builds new user scopes from usernames passed through cleanUsername when Signup=true and CreateUserDir=true, but the many-to-one...

8.1CVSS7.7AI score0.00323EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/07/20 10:19 p.m.13 views

File Browser: Colliding username normalization gives two users the same home directory

Summary FileBrowser confines each user to a scope: a home directory that acts as the boundary for everything they can read or write. When self-registration and automatic home-directory creation are both enabled Signup=true and CreateUserDir=true, a new user's scope is built from their username...

8.1CVSS5.5AI score0.00323EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/07/20 10:19 p.m.11 views

GHSA-7RC3-G7H6-22M7 File Browser: Colliding username normalization gives two users the same home directory

Summary FileBrowser confines each user to a scope: a home directory that acts as the boundary for everything they can read or write. When self-registration and automatic home-directory creation are both enabled Signup=true and CreateUserDir=true, a new user's scope is built from their username...

8.1CVSS5.5AI score0.00323EPSS
SaveExploits0References5
Rows per page
Query Builder