https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 08:58:53 +0000 https://cve.radiocsirt.org/vuln/cve-2026-62684 <p><strong>Affected:</strong> filebrowser</p> <p>File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, the Link storage struct is serialized directly by sharePostHandler, shareListHandler, and shareGetsHandler through renderJSON, causing POST /api/share/{path} and GET /api/shares to expose password_hash and the bypass token, while an administrator can retrieve these secrets for every user&#39;s shares, enabling offline password cracking and direct access to protected shares. This issue is fixed in version 2.63.17.</p> <p><strong>Affected:</strong> filebrowser</p> <p>File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. Prior to 2.63.17, the Link storage struct is serialized directly by sharePostHandler, shareListHandler, and shareGetsHandler through renderJSON, causing POST /api/share/{path} and GET /api/shares to expose password_hash and the bypass token, while an administrator can retrieve these secrets for every user&#39;s shares, enabling offline password cracking and direct access to protected shares. This issue is fixed in version 2.63.17.</p> https://cve.radiocsirt.org/vuln/cve-2026-62684