Threats tagged 'ghsa-wx2x-g9fw-53fc'

File Browser versions prior to 2.63.22 have a vulnerability where access rules for descendant files and directories are not properly validated during recursive copy, rename, and delete operations. This allows authenticated users to bypass path-based access controls by manipulating allowed parent directories to affect denied files, compromising confidentiality and integrity.