Vulnerability GHSA-r4v7-6wcg-ghj5
Advisory details are being prepared in the background.
Medium Risk
MEDIUM RISK
CVSS Score: 6.5
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
4 months ago
June 25, 2026 at 06:18 PM UTC
FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks
<0.0.0-20260522161427-fa5abc8c67f3a
<0.0.0-20260522161427-fa5abc8c67f3a
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
4 months ago
FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks in github.com/gtsteffaniak/filebrowser
* GO-2026-5776
* GO-2026-5776
Unknown
4 months ago
FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header) in github.com/gtsteffaniak/filebrowser
<0.0.0-20260501184955-6bfc3974192e GO-2026-5511
<0.0.0-20260501184955-6bfc3974192e GO-2026-5511
Unknown
4 months ago
FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion in github.com/gtsteffaniak/filebrowser
<0.0.0-20260501183844-112740bdd41d GO-2026-5383
<0.0.0-20260501183844-112740bdd41d GO-2026-5383
Unknown
4 months ago
FileBrowser Quantum: unauthenticated user share share info in github.com/gtsteffaniak/filebrowser
<1.2.1-stable.0.20260514154726-1802e1281135 GO-2026-5089
<1.2.1-stable.0.20260514154726-1802e1281135 GO-2026-5089
High Risk
5 months ago
FileBrowser Quantum: unauthenticated user share share info
<1.2.1-stable.0.20260514154726-1802e1281135 GHSA-3jmg-p96m-m328
<1.2.1-stable.0.20260514154726-1802e1281135 GHSA-3jmg-p96m-m328
Impacted packages
Timeline
Published
4 months ago
June 25, 2026 at 06:18 PM UTC
Last Modified
4 months ago
June 25, 2026 at 11:11 PM UTC