CyberRota Analysis
AI-GeneratedFile Browser versions prior to 2.63.22 are vulnerable due to inadequate validation of access rules during recursive file operations, enabling authenticated users to bypass path-based access controls. This flaw allows attackers to manipulate restricted files by exploiting permissions on their parent directories, compromising both confidentiality and integrity. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized file access and manipulation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
File Browser before v2.63.22 fails to validate access rules for descendants during recursive copy, rename, and delete operations, allowing authenticated users to bypass path-based access controls. Attackers can copy, rename, or delete denied files by operating on their allowed parent directory, defeating rule-based isolation for confidentiality and integrity.