Skip to content
OpenAdvisories

Product · ShaneIsrael

fireshare

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-54544

    Fireshare has unauthenticated SSRF via missing login_required on webhook test endpoints

    Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.16, two API endpoints that trigger outbound HTTP requests are missing the @login_required decorator. An unauthenticated attacker can call POST /api/test-discord-webhook or POST /ap…

    ShaneIsrael fireshare
  • High 7.1
    CVE-2026-33645

    Fireshare has Path Traversal Arbitrary File Write in `/api/uploadChunked`

    Fireshare facilitates self-hosted media and link sharing. In version 1.5.1, an authenticated path traversal vulnerability in Fireshare’s chunked upload endpoint allows an attacker to write arbitrary files outside the intended upload directory. The `checkSum` …

    ShaneIsrael fireshare