error311

Records38All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

error311 records in CISA KEV

No error311 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Filerise 12 records HIGH

Records

38 records

TI-2026-74499 CVE-2026-61843

Unauthenticated file overwrite in FileRise via upload-enabled shares

HIGH 75

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00372 Published 2026-10-14 Fixed in 3.18.0 CWE-862

TI-2026-25514 CVE-2026-33072

FileRise: Default Encryption Key Enables Token Forgery and Config Decryption

HIGH 75

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00229 Published 2026-03-20 Fixed in 3.9.0 CWE-1188

TI-2025-41705 CVE-2025-68116

FileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handling

HIGH 74

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 8.9 Network Low privileges User interaction EPSS 0.00266 Published 2025-12-16 Fixed in 2.7.1 CWE-79

TI-2026-25513 CVE-2026-33071

FileRise: WebDAV upload path bypasses filename validation enforced by regular uploads

HIGH 71

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00659 Published 2026-03-20 Fixed in 3.8.0 CWE-434

TI-2026-74495 CVE-2026-57490

WebDAV authentication in FileRise skips TOTP two-factor check

HIGH 70

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00522 Published 2026-10-14 Fixed in 3.16.0 CWE-308

TI-2026-74494 CVE-2026-57489

Authentication bypass in FileRise via spoofed reverse-proxy headers

HIGH 70

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00647 Published 2026-10-14 Fixed in 3.16.0 CWE-290

TI-2026-74487 CVE-2026-104108

OIDC login in FileRise binds attackers to existing local accounts

HIGH 70

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00218 Published 2026-10-14 Fixed in 3.23.0 CWE-287

TI-2026-74497 CVE-2026-57492

FileRise setup mode reopens when users.txt is empty

HIGH 68

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00349 Published 2026-10-14 Fixed in 3.16.0 CWE-306

TI-2026-32400 CVE-2026-44460

FileRise: TOTP Bypass via Setup Endpoint Disclosing Existing Secret

HIGH 68

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00329 Published 2026-05-27 Fixed in 3.12.0 CWE-200

TI-2026-25739 CVE-2026-33329

Path traversal in error311 FileRise

HIGH 68

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00461 Published 2026-03-24 Fixed in 3.10.0 CWE-22

TI-2026-74500 CVE-2026-61844

Folder metadata collisions in FileRise bypass read_own isolation

HIGH 66

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00324 Published 2026-10-14 Fixed in 3.18.0 CWE-706

TI-2026-74498 CVE-2026-57493

FileRise remember-me login restores stale admin role after demotion

HIGH 65

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.003 Published 2026-10-14 Fixed in 3.16.0 CWE-613

TI-2026-74484 CVE-2026-104105

TOTP codes can be replayed within their window in FileRise

MEDIUM 64

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 6.4 Network Low privileges User interaction EPSS 0.00266 Published 2026-10-14 Fixed in 3.23.0 CWE-287

TI-2026-25740 CVE-2026-33330

FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback

MEDIUM 64

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00384 Published 2026-03-24 Fixed in 3.10.0 CWE-863

TI-2026-74489 CVE-2026-104110

Unauthenticated disclosure of client portal data in FileRise Pro

MEDIUM 63

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00306 Published 2026-10-14 Fixed in 3.24.0 CWE-200

TI-2026-74488 CVE-2026-104109

FileRise ZIP extraction follows symlinks to overwrite external files

MEDIUM 63

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00384 Published 2026-10-14 Fixed in 3.23.0 CWE-59

TI-2026-74496 CVE-2026-57491

ZIP extraction in FileRise bypasses the upload blocklist

MEDIUM 62

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00349 Published 2026-10-14 Fixed in 3.16.0 CWE-434

TI-2026-74486 CVE-2026-104107

Path traversal in FileRise lets users write files outside storage root

MEDIUM 62

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00364 Published 2026-10-14 Fixed in 3.23.0 CWE-22

TI-2026-74507 CVE-2026-77427

Hard-coded fallback encryption key in FileRise manual installs

MEDIUM 60

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00349 Published 2026-10-14 Fixed in 3.22.0 CWE-1188

TI-2026-74503 CVE-2026-69191

FileRise login method restrictions bypassed via direct API access

MEDIUM 58

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00219 Published 2026-10-14 Fixed in 3.21.0 CWE-287

TI-2026-74483 CVE-2026-103988

Authorization bypass in FileRise renameFolder endpoint

MEDIUM 58

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00229 Published 2026-10-14 Fixed in 3.23.0 CWE-284

TI-2026-74505 CVE-2026-69194

Unsanitized footer HTML exposed by FileRise public site config

MEDIUM 55

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00227 Published 2026-10-14 Fixed in 3.21.0 CWE-79

TI-2026-74464 CVE-2026-55498

Symlink following in FileRise exposes files outside shared folders

MEDIUM 55

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00331 Published 2026-10-14 Fixed in 3.15.0 CWE-59

TI-2026-25512 CVE-2026-33070

FileRise has Unauthenticated Share Link Deletion

MEDIUM 55

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00394 Published 2026-03-20 Fixed in 3.8.0 CWE-306

TI-2026-71341 CVE-2026-54459

Missing CSRF checks in FileRise file and share-link creation

MEDIUM 53

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00118 Published 2026-10-12 Fixed in 3.14.0 CWE-352

Open these records in search →