CyberRota Analysis
AI-GeneratedFile Browser versions 2.50.0 through 2.63.21 are vulnerable due to improper validation of JWT expiration when proxy authentication is set up with a non-default logout page. This flaw allows attackers with a previously valid token to access protected routes and administrative endpoints indefinitely, as well as renew expired tokens. Organizations using affected versions of Exchange should prioritize remediation to prevent unauthorized access and potential data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
File Browser versions from 2.50.0 through 2.63.21 fail to validate JWT expiration when proxy authentication is configured with a non-default logout page. Attackers with a previously valid token can access protected routes and administrative endpoints indefinitely, and exchange expired tokens for fresh ones via the renewal endpoint.