Insecure Direct Object Reference Vulnerability in File Browser by FileBrowser

CVE-2025-64523

What is CVE-2025-64523?

The File Browser application has an Insecure Direct Object Reference vulnerability that impacts its file sharing functionality. Authenticated users with share permissions can maliciously delete other users' shared links without undergoing proper authorization checks. This flaw poses significant risks such as disrupting business operations, leading to denial of service for legitimate users, potential data loss, and violations of data confidentiality within collaborative environments. Organizations relying on File Browser for file sharing and management should upgrade to version 2.45.1, which addresses this vulnerability, to safeguard their data and operations.

References