8 matches found
CVE-2026-62664
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder constructs and creates the destination. An...
EUVD-2026-101671
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder constructs and creates the destination. An...
CVE-2026-62664 FileRise: Authenticated path traversal in createFolder allows arbitrary directory creation outside the upload root
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder constructs and creates the destination. An...
CVE-2026-62664 FileRise: Authenticated path traversal in createFolder allows arbitrary directory creation outside the upload root
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder constructs and creates the destination. An...
CVE-2026-62664
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder constructs and creates the destination. An...
CVE-2026-62664
The FileRise self-hosted web-based file manager is vulnerable to an authenticated path traversal flaw in the createFolder function. Prior to version 3.19.0 , the system validates the folderName string but fails to reject dot-dot path segments . This allows an authenticated low-privileged user wit...
PT-2026-114236
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder constructs and creates the destination. An...
CVE-2026-62664: Improper Limitation of a Pathname to a Restricted Directory
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does not reject dot-dot path segments before FolderModel::createFolder constructs and creates the destination. An...