Threats tagged 'ghsa-3fx7-3v6j-xrh6'

Dromara free-fs versions 2.0.1 through 2.3.1 have an authorization bypass vulnerability. This flaw allows attackers to access code-protected shares without providing the required share code, as the enforcement is only done client-side. Attackers who know a share ID can list and download files from these shares, including preview-only shares, without authorization.