Lucene search
+L

870 matches found

OSV
OSV
•added 2025/11/17 7:11 p.m.•19 views

GO-2025-4117 File Browser is Vulnerable to Insecure Direct Object Reference (IDOR) in Share Deletion Function in github.com/filebrowser/filebrowser

File Browser is Vulnerable to Insecure Direct Object Reference IDOR in Share Deletion Function in github.com/filebrowser/filebrowser...

8.8CVSS8.1AI score0.00461EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2025/11/13 11:08 p.m.•16 views

CVE-2025-64523

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Versions prior to 2.45.1 have an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. Th...

7.2CVSS7.9AI score0.00461EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/13 10:36 p.m.•8 views

EUVD-2025-180210

File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency...

9.1CVSS6.5AI score0.00826EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/11/13 10:36 p.m.•46 views

File Browser has risk of HTTP Request/Response smuggling through vulnerable dependency

The standard library net/http package dependency used by File Browser improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. I can permit request smuggling if a net/http server is used in conjunction with a server that incorrectly accepts a bare LF as part of a...

9.1CVSS7.2AI score0.00826EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2025/11/13 10:34 p.m.•27 views

File Browser is Vulnerable to Insecure Direct Object Reference (IDOR) in Share Deletion Function

Summary It has been found an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. This vulnerability allows any authenticated user with share permissions to delete other users' shared links without authorization checks. The impact is...

8.8CVSS7.7AI score0.00461EPSS
SaveExploits1References4Affected Software1
Snyk
Snyk
•added 2025/11/13 10:34 p.m.•8 views

Improper Authorization

Overview github.com/filebrowser/filebrowser/v2/http is a web file browser. Affected versions of this package are vulnerable to Improper Authorization via the shareDeleteHandler function, which handles deletion requests based solely on the share hash, and does not verify whether the link.UserID...

8.8CVSS7.9AI score0.00461EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/11/13 10:34 p.m.•31 views

EUVD-2025-150363

File Browser is Vulnerable to Insecure Direct Object Reference IDOR in Share Deletion Function...

7.2CVSS8.1AI score0.00461EPSS
SaveExploits1References3
OSV
OSV
•added 2025/11/13 10:34 p.m.•23 views

GHSA-6CQF-CFHV-659G File Browser is Vulnerable to Insecure Direct Object Reference (IDOR) in Share Deletion Function

Summary It has been found an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. This vulnerability allows any authenticated user with share permissions to delete other users' shared links without authorization checks. The impact is...

8.8CVSS7.6AI score0.00461EPSS
SaveExploits1References4
NVD
NVD
•added 2025/11/12 11:15 p.m.•16 views

CVE-2025-64523

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Versions prior to 2.45.1 have an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. Th...

8.8CVSS0.00461EPSS
SaveExploits1References2
OSV
OSV
•added 2025/11/12 10:11 p.m.•17 views

CVE-2025-64523 FileBrowser has Insecure Direct Object Reference (IDOR) in Share Deletion Function

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Versions prior to 2.45.1 have an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. Th...

7.2CVSS6.5AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•3 views

CVE-2025-64523: Improper Authorization

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Versions prior to 2.45.1 have an Insecure Direct Object Reference IDOR vulnerability in the FileBrowser application's share deletion functionality. Th...

8.8CVSS7.9AI score0.00461EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/12 12:00 a.m.•29 views

PT-2025-46766

Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.45.1 Description File Browser provides a file managing interface for tasks like uploading, deleting, previewing, renaming, and editing files. An Insecure Direct Object Reference IDOR exists in the application's...

8.8CVSS7.9AI score0.00461EPSS
SaveExploits1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2011-2634

Malware in sbrugna...

7.5CVSS5.8AI score0.02657EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2004-2279

Malware in sbrugna...

5CVSS6.4AI score0.02722EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2019-2436

Malware in sbrugna...

6.5CVSS6.7AI score0.01398EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2018-8358

Malware in sbrugna...

5.3CVSS6AI score0.02503EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2011-4749

Malware in sbrugna...

4CVSS5.8AI score0.0263EPSS
SaveExploits2References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2008-6312

Malware in sbrugna...

5CVSS6.4AI score0.01205EPSS
SaveExploits0References4
Fedora
Fedora
•added 2025/10/06 1:12 a.m.•26 views

[SECURITY] Fedora 42 Update: jupyterlab-4.4.9-1.fc42

JupyterLab is the next-generation user interface for Project Jupyter offering all the familiar building blocks of the classic Jupyter Notebook notebook, terminal, text editor, file browser, rich outputs, etc. in a flexible and powerful user interface...

4.3CVSS5.9AI score0.0024EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-54916

Malicious code in bioql PyPI...

6.1CVSS6.6AI score0.00202EPSS
SaveExploits0References2
Rows per page
Query Builder