2 matches found
CVE-2026-103988
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php authorizes an authenticated, non-folder-scoped, non-administrator with a valid CSRF token against the source folder but does not...
5.4CVSS0.00186EPSS
SaveExploits0References3
CVE-2026-103988 FileRise renameFolder omits destination-parent authorization
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php authorizes an authenticated, non-folder-scoped, non-administrator with a valid CSRF token against the source folder but does not...
5.4CVSS5.8AI score
SaveExploits0References5
20