error311 vulnerabilities

38 published CVEs name error311 among the affected products.

Critical 1High 16Medium 19Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2026-104109
FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage root
error311 · FileRise
Medium6.8
CVE-2026-104107
FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs
error311 · FileRise
Medium6.5
CVE-2026-104110
FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php
error311 · FileRise
Medium5.3
CVE-2026-104108
FileRise OIDC login can bind an attacker identity to an existing local account
error311 · FileRise
High8.1
CVE-2026-103977
FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts
error311 · FileRise
High8.1
CVE-2026-104105
FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay)
error311 · FileRise
Medium6.4
CVE-2026-104106
FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verification
error311 · FileRise
Medium6.5
CVE-2026-103988
FileRise renameFolder omits destination-parent authorization
error311 · FileRise
Medium5.4
CVE-2026-69193
FileRise: Rate Limiting Bypass via Username Rotation Enables Unlimited Password Spraying
error311 · FileRise
Medium6.5
CVE-2026-69191
FileRise: Login Method Restriction Bypass via Direct API Access
error311 · FileRise
Medium5.4