github.com/filebrowser/filebrowser/v2

44 results · Feed

• High 8.0
  CVE-2025-52903

  File Browser Allows Execution of Shell Commands That Can Spawn Other Commands

  File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions on the 2.x branch prior to 2.33.10, the Command Execution feature of File Browser only allows the ex…

  filebrowser filebrowser github.com/filebrowser/filebrowser/v2 github.com/filebrowser/filebrowser Go
  Jun 26, 2025
• High 7.6
  CVE-2025-52902

  File Browser has Stored Cross-Site Scripting vulnerability

  File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. The Markdown preview function of File Browser prior to v2.33.7 is vulnerable to Stored Cross-Site-Scripting (XSS…

  filebrowser filebrowser github.com/filebrowser/filebrowser/v2 github.com/filebrowser/filebrowser Go
  Jun 26, 2025
• Medium 5.5
  CVE-2025-52900

  File Browser has Insecure File Permissions

  File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. The file access permissions for files uploaded to or created from File Browser are never explicitly set by the a…

  filebrowser filebrowser github.com/filebrowser/filebrowser/v2 github.com/filebrowser/filebrowser Go
  Jun 26, 2025
• High 8.8
  CVE-2021-46398 Public exploit

  Cross-Site Request Forgery in Filebrowser

  A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor user with admin privilege and get access to the filesystem via a malicious HTML webpage that is sent to the victim. An admin can run commands …

  github.com/filebrowser/filebrowser/v2 Go
  Feb 4, 2022