Back to CVE List

CVE-2026-30933

HIGH SEVERITY

CVSS Score & Metrics

Base Score
7.5 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vulnerability Description

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, the remediation for CVE-2026-27611 is incomplete. Password protected shares still disclose tokenized downloadURL via /public/api/share/info. This vulnerability is fixed in 1.3.1-beta and 1.2.2-stable.

Vulnerability Details

Published Date
Last Modified
CWE ID
CWE-200
Source
GitHub
Vendor
go
Product
github.com/gtsteffaniak/filebrowser/backend

External References

Discussion (0)

Add Comment

No comments yet. Be the first!