Threats tagged 'ghsa-6x93-4cv7-m749'

File Browser versions prior to 2.63.20 contain a vulnerability where the createUserDir isolation is not enforced in proxy and hook authentication auto-provisioning paths. This flaw allows attackers with valid upstream-authenticated credentials to access and manipulate files of other users by exploiting improper server root scope assignment. The vulnerability has a high severity rating with a CVSS score of 8.8.