CVE-2025-52996

Katalog CVE

CVSS 4.3 · Medium EPSS 0,39%

Kerentanan Authentication Bypass by Primary Weakness pada filebrowser. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions 2.32.0 and prior, the implementation of password protected links is error-prone, resulting in potential unprotected sharing of a file through a direct download link. This link can either be shared unknowingly by a user or discovered from various locations such as the browser history or the log of a proxy server used. At time of publication, no known patched versions are available.

Rincian

Terbit di NVD

30 Juni 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-305: Authentication Bypass by Primary Weakness

EPSS (30 hari)

0,39% peluang dieksploitasi; lebih tinggi dari 31,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/filebrowser/filebrowser/security/advisories/GHSA-3v48-283x-f2w4 exploit · advisory vendor
• https://github.com/filebrowser/filebrowser/issues/5239 issue tracking
• https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20250327-02_Filebrowser_Password_Protection...