error311

Records38All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high17CVSS 7.0–8.9

Exploited now

error311 records in CISA KEV

No error311 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Filerise 12 records HIGH

Records

12 records in Filerise · all components

TI-2026-25514 CVE-2026-33072

FileRise: Default Encryption Key Enables Token Forgery and Config Decryption

HIGH 75

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00229 Published 2026-03-20 Fixed in 3.9.0 CWE-1188

TI-2025-41705 CVE-2025-68116

FileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handling

HIGH 74

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 8.9 Network Low privileges User interaction EPSS 0.00266 Published 2025-12-16 Fixed in 2.7.1 CWE-79

TI-2026-25513 CVE-2026-33071

FileRise: WebDAV upload path bypasses filename validation enforced by regular uploads

HIGH 71

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00659 Published 2026-03-20 Fixed in 3.8.0 CWE-434

TI-2026-25739 CVE-2026-33329

Path traversal in error311 FileRise

HIGH 68

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00461 Published 2026-03-24 Fixed in 3.10.0 CWE-22

TI-2026-25740 CVE-2026-33330

FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback

MEDIUM 64

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00384 Published 2026-03-24 Fixed in 3.10.0 CWE-863

TI-2026-25512 CVE-2026-33070

FileRise has Unauthenticated Share Link Deletion

MEDIUM 55

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00394 Published 2026-03-20 Fixed in 3.8.0 CWE-306

TI-2026-25873 CVE-2026-33477

FileRise has incorrect authorization in /api/file/snippet.php allows read_own users to read other users’ file content

MEDIUM 53

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00234 Published 2026-03-26 Fixed in 3.11.0 CWE-863

TI-2026-20379 CVE-2026-25231

FileRise affected by an Unauthenticated File Read Due to Insufficient Access Control

MEDIUM 42

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01675 Published 2026-02-09 Fixed in 3.3.0 CWE-284

TI-2025-38751 CVE-2025-62510

FileRise insecure folder visibility via name-based mapping and incomplete ACL checks

LOW 35

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00306 Published 2025-10-20 No fix listed CWE-280

TI-2025-38750 CVE-2025-62509

FileRise improper ownership/permission validation allowed cross-tenant file operations

LOW 35

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00306 Published 2025-10-20 Fixed in 1.4.0 CWE-280

TI-2026-20378 CVE-2026-25230

FileRise affected by HTML Injection using color property in file tags

LOW 24

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00248 Published 2026-02-09 Fixed in 3.3.0 CWE-116

TI-2025-40840 CVE-2025-66403

FileRise Vulnerable to Stored XSS via SVG Upload

LOW 24

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00226 Published 2025-12-01 Fixed in 2.2.3 CWE-79

Open these records in search →

Critical	1
High	17
Medium	19
Low	1
No CVSS	0