CVE-2025-52996 – Apache File Browser Unprotected File Sharing Vulnerability

CVE ID : CVE-2025-52996

Published : June 30, 2025, 8:15 p.m. | 1 hour, 47 minutes ago

Description : File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions 2.32.0 and prior, the implementation of password protected links is error-prone, resulting in potential unprotected sharing of a file through a direct download link. This link can either be shared unknowingly by a user or discovered from various locations such as the browser history or the log of a proxy server used. At time of publication, no known patched versions are available.

Severity: 3.1 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…