Tag
Path Traversal in FileBrowser Subtitle Handler
1 rule 2 TTPs 1 CVEAn unauthenticated-accessible path traversal vulnerability in FileBrowser's subtitle handler allows authenticated users to read arbitrary files from the host filesystem, leading to potential credential theft and privilege escalation.
FileBrowser Username Normalization Collision Leads to Authorization Bypass
4 TTPs 1 CVEA critical authorization bypass vulnerability, CVE-2026-62685, in FileBrowser versions <= 2.63.16 enables an attacker to gain full read and write access to other users' files by exploiting a username normalization collision during self-registration, thus bypassing per-user isolation and allowing data tampering or exfiltration.
File Browser Share Links Accessible After Permission Revocation
3 rules 1 TTP 1 CVEFile Browser share links remain accessible after Share/Download permissions are revoked, allowing continued access to shared files even after an administrator revokes the user's permissions.
File Browser EPUB Preview Stored XSS Vulnerability (CVE-2026-34529)
2 rulesFile Browser versions prior to 2.62.2 are vulnerable to stored cross-site scripting (XSS) via the EPUB preview function, allowing attackers to execute arbitrary JavaScript in a user's browser by embedding malicious code in a crafted EPUB file.
File Browser Stored XSS via Crafted EPUB File
2 rules 5 TTPs 1 CVE 2 IOCsFile Browser version 2.62.1 and earlier is vulnerable to stored cross-site scripting (XSS) via crafted EPUB files, allowing attackers to execute arbitrary JavaScript in a victim's browser by exploiting the application's misconfigured iframe sandbox and stealing sensitive information like JWT tokens.