Threats tagged 'ghsa-pp88-jhwj-5qh5'

File Browser v2.63.15 has a vulnerability where deleting a shared directory using a path with a trailing slash fails to remove the associated public share. This occurs because the database query for shares uses the unnormalized path, missing the exact share path without the trailing slash. As a result, if the directory is recreated later, the stale public share becomes active again, exposing the new directory contents through the old public URL. The issue affects versions prior to 2.63.17 and is fixed in 2.63.17.