CVE-2025-52996 - CVE House
Back to Database
Status published Low CVE-2025-52996

File Browser's Password Protection of Links Vulnerable to Bypass

Vulnerability Description

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions 2.32.0 and prior, the implementation of password protected links is error-prone, resulting in potential unprotected sharing of a file through a direct download link. This link can either be shared unknowingly by a user or discovered from various locations such as the browser history or the log of a proxy server used. At time of publication, no known patched versions are available.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-52996

Credits & Attribution

No credits recorded in the NVD database.

References

More from filebrowser

View All →
CVE-2025-64523
FileBrowser has Insecure Direct Object Reference (IDOR) in Share Deletion Function
High 7.2
CVE-2025-53893
File Browser Vulnerable to Uncontrolled Memory Consumption Due to Oversized File Processing
High 7.7
CVE-2025-53826
FileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after Logout
High 7.7
CVE-2025-52997
File Browser Insecurely Handles Passwords
Medium 5.9
CVE-2025-52995
File Browser vulnerable to command execution allowlist bypass
High 8.1

Affected Vendor

filebrowser

View all reports →

Affected Software

filebrowser
Vulnerable Versions:
<= 2.32.0

Timeline

Official Publish: June 30th, 2025
Last Modified: August 4th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-305

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.