FileBrowser has Insecure Direct Object Reference (IDOR) in Share Deletion Function

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-64523 · Microsoft / collected KEV context

EUVD-2025-150363

GHSA-6cqf-cfhv-659g

GO-2025-4117

cve-program · CVE-2025-64523

• https://github.com/filebrowser/filebrowser/security/advisories/GHSA-6cqf-cfhv-659g
• https://github.com/filebrowser/filebrowser/commit/291223b3cefe1e50fae8f73d70464b1dc25351a4

euvd · EUVD-2025-150363

• https://github.com/filebrowser/filebrowser/security/advisories/GHSA-6cqf-cfhv-659g
• https://github.com/filebrowser/filebrowser/commit/291223b3cefe1e50fae8f73d70464b1dc25351a4

nvd · CVE-2025-64523

• https://github.com/filebrowser/filebrowser/commit/291223b3cefe1e50fae8f73d70464b1dc25351a4
• https://github.com/filebrowser/filebrowser/security/advisories/GHSA-6cqf-cfhv-659g

osv · GHSA-6cqf-cfhv-659g

• https://github.com/filebrowser/filebrowser/security/advisories/GHSA-6cqf-cfhv-659g
• https://nvd.nist.gov/vuln/detail/CVE-2025-64523
• https://github.com/filebrowser/filebrowser/commit/291223b3cefe1e50fae8f73d70464b1dc25351a4
• https://github.com/filebrowser/filebrowser

osv · GO-2025-4117

• https://github.com/filebrowser/filebrowser/security/advisories/GHSA-6cqf-cfhv-659g
• https://nvd.nist.gov/vuln/detail/CVE-2025-64523
• https://github.com/filebrowser/filebrowser/commit/291223b3cefe1e50fae8f73d70464b1dc25351a4

No related operational record is retained in the current change model.