Skip to content
OpenAdvisories

Product · error311

FileRise

38 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-103977 Public exploit

    FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts

    FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise stores failed TOTP verification attempts in $_SESSION. An attacker who already possesses a target account's valid primary credent…

    error311 FileRise
  • High 8.9
    CVE-2025-68116 Public exploit

    FileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handling

    FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 2.7.1 are vulnerable to Stored Cross-Site Scripting (XSS) due to unsafe handling of browser-renderable user uploads when served through the sharing and download endpoints. An attack…

    error311 FileRise