CVE-2026-62684

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, the Link storage struct is serialized directly by sharePostHandler, shareListHandler, and shareGetsHandler through renderJSON, causing POST...

CVE-2026-62684: Exposure of Sensitive Information to an Unauthorized Actor

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, the Link storage struct is serialized directly by sharePostHandler, shareListHandler, and shareGetsHandler through renderJSON, causing POST...

Exposure of Resource to Wrong Sphere

Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere via the sharePostHandler process. An attacker can gain unauthorized access to files by creating a public share for a non-existent path and later uploading a file to that path, which then becomes...

Exposure of Resource to Wrong Sphere

Overview github.com/filebrowser/filebrowser/v2/http is a web file browser. Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere via the sharePostHandler process. An attacker can gain unauthorized access to files by creating a public share for a non-existent pat...