Filebrowser
Approved changes feed: RSS · Atom
cpe:2.3:a:filebrowser:filebrowser:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Filebrowser (26a4e42e-1dc9-528e-8a60-e2cb819c0931) |
|---|---|
| Product | Filebrowser (77d41ad5-bb74-5a90-905f-56665dc45fbe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/filebrowser/filebrowser |
purl2cpe | 2026-06-01 10:14:39.380770 |
pkg:golang/github.com/filebrowser/filebrowser |
purl2cpe | 2026-06-01 10:14:39.380772 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-73613 |
vulnerable | 2026-09-16 04:33:10.078005 |
filebrowser before 2.63.19 Out-of-Scope File Deletion via Symlink
HIGH (8.2)
filebrowser versions before 2.63.19 contain an out-of-scope file deletion vulnerability in the TUS upload cache eviction mechanism that allows authenticated users with only Create permission to delete arbitrary files outside their scope. Attackers can swap an ancestor directory with a symlink during the cache TTL window to redirect the raw os.Remove call to an out-of-scope target, bypassing ScopedFs scope guards and Perm.Delete checks.
Published: 2026-08-13T11:28:16.532Z
Updated: 2026-08-14T20:18:24.420Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73612 |
vulnerable | 2026-09-16 04:33:09.991948 |
File Browser before v2.63.22 Authorization Bypass via Recursive Operations
HIGH (8.1)
File Browser before v2.63.22 fails to validate access rules for descendants during recursive copy, rename, and delete operations, allowing authenticated users to bypass path-based access controls. Attackers can copy, rename, or delete denied files by operating on their allowed parent directory, defeating rule-based isolation for confidentiality and integrity.
Published: 2026-08-13T11:28:15.825Z
Updated: 2026-08-14T16:52:36.059Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-73611 |
not_vulnerable | 2026-09-16 04:33:09.558977 |
File Browser 2.50.0 through 2.63.21 JWT Expiration Bypass
MEDIUM (6.8)
File Browser versions from 2.50.0 through 2.63.21 fail to validate JWT expiration when proxy authentication is configured with a non-default logout page. Attackers with a previously valid token can access protected routes and administrative endpoints indefinitely, and exchange expired tokens for fresh ones via the renewal endpoint.
Published: 2026-08-13T11:28:15.147Z
Updated: 2026-09-30T17:20:26.696Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90928 |
vulnerable | 2026-09-16 04:33:05.578265 |
File Browser through 2.63.23 Memory Exhaustion via subtitle endpoint
MEDIUM (6.5)
File Browser through 2.63.23 contains a memory exhaustion vulnerability in the subtitle conversion endpoint that loads entire subtitle files into memory without size limits. Authenticated attackers with download permission can request conversion of large .srt, .ass, or .ssa files and exhaust server memory through concurrent requests, causing denial of service.
Published: 2026-09-14T12:48:24.837Z
Updated: 2026-09-14T14:01:13.055Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90930 |
vulnerable | 2026-09-16 04:33:05.568483 |
File Browser through 2.63.23 Path Traversal via Symlink Alias
MEDIUM (6.8)
File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing authenticated users to bypass deny rules. Attackers can read and overwrite rule-denied files by accessing them through in-scope symbolic link aliases that resolve to denied paths.
Published: 2026-09-14T12:48:26.098Z
Updated: 2026-09-14T14:17:49.647Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90929 |
vulnerable | 2026-09-16 04:33:05.433437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90927 |
vulnerable | 2026-09-16 04:33:05.385824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-62843 |
vulnerable | 2026-07-29 01:06:19.255771 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-62685 |
vulnerable | 2026-07-29 01:06:19.240785 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-62683 |
vulnerable | 2026-07-29 01:06:19.240653 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-61874 |
vulnerable | 2026-07-29 01:06:18.914894 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-55668 |
vulnerable | 2026-07-29 01:00:28.557023 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-55667 |
vulnerable | 2026-07-29 01:00:28.556854 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54097 |
vulnerable | 2026-07-29 01:00:27.427424 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54096 |
vulnerable | 2026-07-29 01:00:27.427185 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54094 |
vulnerable | 2026-07-29 01:00:27.426884 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54093 |
vulnerable | 2026-07-29 01:00:27.426636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54092 |
vulnerable | 2026-07-29 01:00:27.426260 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54091 |
vulnerable | 2026-07-29 01:00:27.426121 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54090 |
vulnerable | 2026-07-29 01:00:27.425982 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54089 |
vulnerable | 2026-07-29 01:00:27.425636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-54088 |
vulnerable | 2026-07-29 01:00:27.425405 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35607 |
vulnerable | 2026-06-08 07:59:14.172869 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35606 |
vulnerable | 2026-06-08 07:59:14.172629 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35605 |
vulnerable | 2026-06-08 07:59:14.172272 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35604 |
vulnerable | 2026-06-08 07:59:14.171982 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35585 |
vulnerable | 2026-06-08 07:59:14.160121 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34530 |
vulnerable | 2026-06-08 07:59:12.668502 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34529 |
vulnerable | 2026-06-08 07:59:12.668125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34528 |
vulnerable | 2026-06-08 07:59:12.667799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32761 |
vulnerable | 2026-06-08 07:57:18.121826 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32760 |
vulnerable | 2026-06-08 07:57:18.121461 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32759 |
vulnerable | 2026-06-08 07:57:18.121055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-32758 |
vulnerable | 2026-06-08 07:57:18.120790 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30934 |
vulnerable | 2026-06-08 07:57:14.564338 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-30933 |
vulnerable | 2026-06-08 07:57:14.562211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-29188 |
vulnerable | 2026-06-08 07:55:16.205583 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28492 |
vulnerable | 2026-06-08 07:55:15.357124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25890 |
vulnerable | 2026-06-08 07:53:20.582996 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25889 |
vulnerable | 2026-06-08 07:53:20.582565 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-23849 |
vulnerable | 2026-06-08 07:51:16.338602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64523 |
vulnerable | 2026-06-08 07:39:19.887712 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53893 |
vulnerable | 2026-06-08 07:31:15.912801 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53826 |
vulnerable | 2026-06-08 07:31:15.652927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52997 |
vulnerable | 2026-06-08 07:31:13.799027 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52996 |
vulnerable | 2026-06-08 07:31:13.798747 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52995 |
vulnerable | 2026-06-08 07:31:13.798446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52904 |
vulnerable | 2026-06-08 07:31:13.160955 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52903 |
vulnerable | 2026-06-08 07:31:13.159178 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52902 |
vulnerable | 2026-06-08 07:31:13.158884 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52901 |
vulnerable | 2026-06-08 07:31:13.158611 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52900 |
vulnerable | 2026-06-08 07:31:13.158253 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39612 |
vulnerable | 2026-06-08 06:09:37.824144 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46398 |
vulnerable | 2026-06-08 05:38:03.337571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.