Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2026/10/14 8:25 p.m.•11 views

CVE-2026-64856 FileRise: Missing Authentication Guard on File Snippet Preview Endpoint

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/snippet.php does not apply the standard authenticated-session guard before processing short text preview requests. The endpoint still performs FileRise ACL...

3.7CVSS
SaveExploits0References3
Rows per page
Query Builder