Skip to content
OpenAdvisories

Vendor

error311

38 known vulnerabilities.

Products

FileRise 38
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-104110 Public exploit

    FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php

    FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.24.0, FileRise Pro /api/pro/portals/get.php returns a configured client portal's full internal record to an unauthenticated caller who knows or …

    error311 FileRise
  • High 8.1
    CVE-2026-103977 Public exploit

    FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts

    FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise stores failed TOTP verification attempts in $_SESSION. An attacker who already possesses a target account's valid primary credent…

    error311 FileRise
  • High 8.9
    CVE-2025-68116 Public exploit

    FileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handling

    FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 2.7.1 are vulnerable to Stored Cross-Site Scripting (XSS) due to unsafe handling of browser-renderable user uploads when served through the sharing and download endpoints. An attack…

    error311 FileRise