Vulnerabilities

Filters

2 selected

12 records

Sort

Vendor: error311 Component: Filerise Clear all filters

TI-2026-25873 CVE-2026-33477

FileRise has incorrect authorization in /api/file/snippet.php allows read_own users to read other users’ file content

MEDIUM 53

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00234 Published 2026-03-26 Fixed in 3.11.0 CWE-863

TI-2026-25740 CVE-2026-33330

FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback

MEDIUM 64

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00384 Published 2026-03-24 Fixed in 3.10.0 CWE-863

TI-2026-25739 CVE-2026-33329

Path traversal in error311 FileRise

HIGH 68

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00461 Published 2026-03-24 Fixed in 3.10.0 CWE-22

TI-2026-25514 CVE-2026-33072

FileRise: Default Encryption Key Enables Token Forgery and Config Decryption

HIGH 75

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00229 Published 2026-03-20 Fixed in 3.9.0 CWE-1188

TI-2026-25513 CVE-2026-33071

FileRise: WebDAV upload path bypasses filename validation enforced by regular uploads

HIGH 71

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00659 Published 2026-03-20 Fixed in 3.8.0 CWE-434

TI-2026-25512 CVE-2026-33070

FileRise has Unauthenticated Share Link Deletion

MEDIUM 55

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00394 Published 2026-03-20 Fixed in 3.8.0 CWE-306

TI-2026-20379 CVE-2026-25231

FileRise affected by an Unauthenticated File Read Due to Insufficient Access Control

MEDIUM 42

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01675 Published 2026-02-09 Fixed in 3.3.0 CWE-284

TI-2026-20378 CVE-2026-25230

FileRise affected by HTML Injection using color property in file tags

LOW 24

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00248 Published 2026-02-09 Fixed in 3.3.0 CWE-116

TI-2025-41705 CVE-2025-68116

FileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handling

HIGH 74

FileRise is a self-hosted web file manager / WebDAV server.

CVSS 3.1HIGH 8.9 Network Low privileges User interaction EPSS 0.00266 Published 2025-12-16 Fixed in 2.7.1 CWE-79

TI-2025-40840 CVE-2025-66403

FileRise Vulnerable to Stored XSS via SVG Upload

LOW 24

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00226 Published 2025-12-01 Fixed in 2.2.3 CWE-79

TI-2025-38751 CVE-2025-62510

FileRise insecure folder visibility via name-based mapping and incomplete ACL checks

LOW 35

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00306 Published 2025-10-20 No fix listed CWE-280

TI-2025-38750 CVE-2025-62509

FileRise improper ownership/permission validation allowed cross-tenant file operations

LOW 35

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00306 Published 2025-10-20 Fixed in 1.4.0 CWE-280