Skip to content
OpenAdvisories

Package · Go

github.com/gtsteffaniak/filebrowser

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    FileBrowser Quantum: Unauthenticated Path Traversal in Public Share Delete Allows Arbitrary File Deletion

    FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-stable and 1.3.9-beta, attacker-controlled path input is joined with a trusted base path prior to sanitization, allowing traversal sequences (e.g., ../) to escape the intended …