Threats tagged 'ghsa-32pr-94pq-34pj'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.8	EPSS 0.4%	CVE-2026-73611filebrowser · File Browser versions from 2.50.0 through 2.63.21 fail to validate JWT expiration when proxy authentication is configured with a non-default logout Medium6.8EPSS 0.4%2026-08-13GCVE DatabaseCVE-2026-73611 File Browser versions 2.50.0 through 2.63.21 contain a vulnerability where JWT expiration is not validated if proxy authentication is configured with a non-default logout page. This allows attackers with previously valid tokens to access protected and administrative routes indefinitely and to renew expired tokens via the renewal endpoint. EPSS 0.4%Vulnerability CWE-613 #ghsa-32pr-94pq-34pj	GCVE Database	2026-08-13

Page 1 of 1