Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2026-30933

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, the remediation for CVE-2026-27611 is incomplete. Password protected shares still disclose tokenized downloadURL via /public/api/share/info. This vulnerability is fixed in 1.3.1-beta and 1.2.2-stable.

VectorNETWORK

PublishedMar 10, 2026, 18:18

Published Bysecurity-advisories@github.com

Base Score

Score7.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

github.com/gtsteffaniak/filebrowser/backend(Go)00.0.0-20260307130210-09713b32a5f6N/A

References

https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.2.2-stable
https://github.com/gtsteffaniak/filebrowser/releases/tag/v1.3.1-beta
https://github.com/gtsteffaniak/filebrowser/security/advisories/GHSA-525j-95gf-766f

Weakness Type

CWE-200

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK