Executive brief
FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header) in github.com/gtsteffaniak/filebrowser
Affected products
- Go github.com/gtsteffaniak/filebrowser
Junglewise Threat Intelligence
GO-2026-5511 - FileBrowser Vulnerable to Stored XSS via SVG File in Public Share (Missing CSP Header) in github.com/gtsteffaniak/filebrowser
Severity: info · Published 2026-06-25
Technologies: github.com/gtsteffaniak/filebrowser (Go). Vendors: Go.
Related threats
- FileBrowser Quantum information disclosure to unauthenticated users
- GO-2026-5776 - FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks in github.com/gtsteffaniak/filebrowser
- FileBrowser: Missing Rate Limiting on Authentication Endpoint Enables Brute Force Attacks
- gtsteffaniak FileBrowser missing rate limiting in login endpoint
- gtsteffaniak FileBrowser Quantum path traversal in public share delete