CVE-2026-54459

The web-based file manager FileRise is vulnerable to Cross-Site Request Forgery (CSRF) in versions prior to 3.14.0 . The application fails to enforce the X-CSRF-Token header for the POST endpoints /api/file/createFile.php and /api/file/createShareLink.php. This allows an attacker to potentially f...

CVE-2026-54459 FileRise: Missing CSRF enforcement for file creation and share-link creation

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not enforce the server-side CSRF token check used by adjacent state-changing...

CVE-2026-54459

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not enforce the server-side CSRF token check used by adjacent state-changing...

CVE-2026-54459 FileRise: Missing CSRF enforcement for file creation and share-link creation

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not enforce the server-side CSRF token check used by adjacent state-changing...

CVE-2026-54459 FileRise: Missing CSRF enforcement for file creation and share-link creation

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not enforce the server-side CSRF token check used by adjacent state-changing...

PT-2026-110987

Name of the Vulnerable Software and Affected Versions FileRise versions prior to 3.14.0 Description Cross-Site Request Forgery CSRF occurs because the application fails to enforce server-side token checks for specific state-changing operations. The POST endpoints '/api/file/createFile.php' and...

CVE-2026-54459: Cross-Site Request Forgery (CSRF)

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and share-link creation handlers but does not enforce the server-side CSRF token check used by adjacent state-changing...