FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover

FileRise: WebDAV upload path bypasses filename validation enforced by regular uploads

FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares

FileRise OIDC login can bind an attacker identity to an existing local account

FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts

FileRise: WebDAV authentication bypasses TOTP/MFA entirely

FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass

FileRise: Path Traversal in `resumableIdentifier` Leading to Arbitrary File Write, Recursive Directory Deletion, and Limited Existence Oracle

FileRise: Default Encryption Key Enables Token Forgery and Config Decryption

FileRise: Setup mode re-activates when users.txt becomes empty, allowing unauthenticated admin creation

FileRise: TOTP Bypass via Setup Endpoint Disclosing Existing Secret

FileRise: Folder Metadata Filename Collisions Bypass "read_own" Isolation

FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback

FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage root

FileRise: Remember-me auto-login uses stale admin role from token instead of current role

FileRise < 3.28.0 Privilege Escalation via WebDAV Session Inheritance

FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs

FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verification

FileRise: Rate Limiting Bypass via Username Rotation Enables Unlimited Password Spraying

FileRise: ZIP extraction writes blocked file extensions to disk, bypassing the upload blocklist

FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay)

FileRise: Insecure default cryptographic key fallback in manual installs

FileRise renameFolder omits destination-parent authorization

FileRise: Login Method Restriction Bypass via Direct API Access

FileRise: Authenticated path traversal in createFolder allows arbitrary directory creation outside the upload root

FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php

FileRise: Unsanitized footerHtml in Public Site Config

FileRise Shared Folder Symlink Escape

FileRise has Unauthenticated Share Link Deletion

FileRise: Missing CSRF enforcement for file creation and share-link creation

FileRise has incorrect authorization in /api/file/snippet.php allows read_own users to read other users’ file content

FileRise: Missing Authentication Guard on File Snippet Preview Endpoint