Lucene search
K

5 matches found

OSV
OSV
added 2026/02/10 12:22 a.m.2 views

GHSA-HXW8-4H9J-HQ2R File Browser has an Authentication Bypass in User Password Update

Security Advisory: Authentication Bypass in User Password Update Summary A case-sensitivity flaw in the password validation logic allows any authenticated user to change their password or an admin to change any user's password without providing the current password. By using Title Case field name...

5.4CVSS5.7AI score0.00017EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2026/02/10 12:22 a.m.4 views

File Browser has an Authentication Bypass in User Password Update

Security Advisory: Authentication Bypass in User Password Update Summary A case-sensitivity flaw in the password validation logic allows any authenticated user to change their password or an admin to change any user's password without providing the current password. By using Title Case field name...

5.4CVSS5.6AI score0.00017EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2026/02/09 9:18 p.m.26 views

CVE-2026-25889 File Browser has an Authentication Bypass in User Password Update

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, a case-sensitivity flaw in the password validation logic allows any authenticated user to change their password or an admin to change...

5.4CVSS0.00017EPSS
Exploits1References3
OSV
OSV
added 2026/02/09 9:18 p.m.5 views

CVE-2026-25889 File Browser has an Authentication Bypass in User Password Update

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, a case-sensitivity flaw in the password validation logic allows any authenticated user to change their password or an admin to change...

5.4CVSS5.6AI score0.00017EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/02/09 9:18 p.m.3 views

CVE-2026-25889 File Browser has an Authentication Bypass in User Password Update

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to 2.57.1, a case-sensitivity flaw in the password validation logic allows any authenticated user to change their password or an admin to change...

5.4CVSS5.5AI score0.00017EPSS
Exploits1References3
Rows per page
Query Builder