Known vulnerabilities in FileBrowser - page 3

Software: FileBrowser
Software CPE: cpe:2.3:a:file_browser:filebrowser:*:*:*:*:*:*:*:*
Total vulnerabilities: 54
Public exploits: 9
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FileBrowser FileBrowser is affected by 54 known vulnerabilities: 7 high, 14 medium, 33 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125390 - Incorrect Authorization
CVE-2026-25890
CWE-863 Medium
No
No
2.57.1 08.04.2026 SB20260408132
#VU125389 - Improper Handling of Case Sensitivity
CVE-2026-25889
CWE-178 Low
No
No
2.57.1 08.04.2026 SB20260408132
#VU125388 - Authorization Bypass Through User-Controlled Key
CVE-2025-64523
CWE-639 Medium
No
No
2.45.1 08.04.2026 SB20260408130
#VU121644 - Information Exposure Through Timing Discrepancy
CVE-2026-23849
CWE-208 Medium
Available
No
2.55.0 19.01.2026 SB2026011953
#VU112161 - Information Exposure Through Query Strings in GET Request
CVE-2025-52901
CWE-598 Low
Available
No
2.33.9 03.07.2025 SB2025070362
#VU112159 - Authentication Bypass by Primary Weakness
CVE-2025-52996
CWE-305 Low
Available
No
- 03.07.2025 SB2025070363
#VU112158 - Weak Password Requirements
CVE-2025-52997
CWE-521 Medium
Available
No
2.34.1 03.07.2025 SB2025070361
#VU112156 - Command injection
CVE-2025-52904
CWE-77 Low
Available
No
- 03.07.2025 SB2025070363
#VU112155 - Command injection
CVE-2025-52903
CWE-77 Low
Available
No
- 03.07.2025 SB2025070363
#VU112154 - Incorrect Default Permissions
CVE-2025-52900
CWE-276 Low
Available
No
2.33.7 03.07.2025 SB2025070359
#VU112152 - Command injection
CVE-2025-52995
CWE-77 Low
Available
No
2.33.10 03.07.2025 SB2025070360
#VU112151 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-52902
CWE-79 Low
Available
No
2.33.7 03.07.2025 SB2025070359
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871
CWE-444 Medium
No
No
2.45.2 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU56274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-37794
CWE-79 Low
No
No
2.16.0 02.09.2021 SB2021090207


Showing elements 41 - 60 out of 54