← Database

CVE-2026-30933

HIGH CVSS: 7.5 Published: 2026-03-10 Modified: 2026-06-17

Description

FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.3.1-beta and 1.2.2-stable, the remediation for CVE-2026-27611 is incomplete. Password protected shares still disclose tokenized downloadURL via /public/api/share/info. This vulnerability is fixed in 1.3.1-beta and 1.2.2-stable.

Affected Platforms

Filebrowser Filebrowser

Weakness Type

CWE-200, CWE-306, CWE-602, CWE-306

References