Vendor
error311
38 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Low 3.7
FileRise: Missing Authentication Guard on File Snippet Preview Endpoint
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/snippet.php does not apply the standard authenticated-session guard before processing short text preview requests. The …
-
Low 3.7
FileRise has Unauthenticated Share Link Deletion
FileRise is a self-hosted web file manager / WebDAV server. In versions prior to 3.8.0, a missing-authentication vulnerability in the deleteShareLink endpoint allows any unauthenticated user to delete arbitrary file share links by providing only the share tok…