CVE-2026-33329: Improper Limitation of a Pathname to a Restricted Directory

FileRise is a self-hosted web file manager / WebDAV server. From version 1.0.1 to before version 3.10.0, the resumableIdentifier parameter in the Resumable.js chunked upload handler UploadModel::handleUpload is concatenated directly into filesystem paths without any sanitization. An authenticated...

FileRise 安全漏洞

FileRise is a lightweight, self-hosted web-based file manager developed by Ryan. Versions of FileRise from 1.0.1 to 3.10.0 contained security vulnerabilities. These vulnerabilities stemmed from the resumableIdentifier parameter in the Resumable.js multipart upload handler, which was concatenated...