error311 FileRise vulnerabilities
38 published CVEs name error311 FileRise among the affected products.
- Published CVEs
- 38
- Last 12 months
- 36
- Critical
- 1
- Known exploited
- 0
Critical 1High 16Medium 19Low 2Not scored 0
CVEs per yearBy the year they were published
- 20254
- 202634
Newest CVEs
- CVE-2026-104109
FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage root
error311 · FileRise
Medium6.8 - CVE-2026-104107
FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs
error311 · FileRise
Medium6.5 - CVE-2026-104110
FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php
error311 · FileRise
Medium5.3 - CVE-2026-104108
FileRise OIDC login can bind an attacker identity to an existing local account
error311 · FileRise
High8.1 - CVE-2026-103977
FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts
error311 · FileRise
High8.1 - CVE-2026-104105
FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay)
error311 · FileRise
Medium6.4 - CVE-2026-104106
FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verification
error311 · FileRise
Medium6.5 - CVE-2026-103988
FileRise renameFolder omits destination-parent authorization
error311 · FileRise
Medium5.4 - CVE-2026-69193
FileRise: Rate Limiting Bypass via Username Rotation Enables Unlimited Password Spraying
error311 · FileRise
Medium6.5 - CVE-2026-69191
FileRise: Login Method Restriction Bypass via Direct API Access
error311 · FileRise
Medium5.4