Skip to content
Filerise vulnerabilities
Newest
-
error311 filerise
FileRise has incorrect authorization in /api/file/snippet.php allows read_own users to read other users’ file content
CVE-2026-33477
4.3 Medium
-
error311 filerise
FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback
CVE-2026-33330
7.1 High
-
error311 filerise
FileRise: Path Traversal in `resumableIdentifier` Leading to Arbitrary File Write, Recursive Directory Deletion, and Limited Existence Oracle
CVE-2026-33329
8.1 High
-
error311 filerise
FileRise: Default Encryption Key Enables Token Forgery and Config Decryption
CVE-2026-33072
8.2 High
-
error311 filerise
FileRise: WebDAV upload path bypasses filename validation enforced by regular uploads
CVE-2026-33071
4.3 Medium
-
error311 filerise
FileRise has Unauthenticated Share Link Deletion
CVE-2026-33070
3.7 Low
-
error311 filerise
FileRise affected by an Unauthenticated File Read Due to Insufficient Access Control
CVE-2026-25231
7.5 High
-
error311 filerise
FileRise affected by HTML Injection using color property in file tags
CVE-2026-25230
4.6 Medium
-
error311 filerise
FileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handling
CVE-2025-68116
Public exploit
8.9 High
-
error311 filerise
FileRise Vulnerable to Stored XSS via SVG Upload
CVE-2025-66403
4.6 Medium
-
error311 filerise
FileRise insecure folder visibility via name-based mapping and incomplete ACL checks
CVE-2025-62510
8.1 High
-
error311 filerise
FileRise improper ownership/permission validation allowed cross-tenant file operations
CVE-2025-62509
8.1 High