FileRise: WebDAV upload path bypasses filename validation enforced by regular uploads

FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares

FileRise OIDC login can bind an attacker identity to an existing local account

FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts

FileRise: WebDAV authentication bypasses TOTP/MFA entirely

FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full authentication bypass

FileRise: Path Traversal in `resumableIdentifier` Leading to Arbitrary File Write, Recursive Directory Deletion, and Limited Existence Oracle

FileRise: Default Encryption Key Enables Token Forgery and Config Decryption

FileRise affected by an Unauthenticated File Read Due to Insufficient Access Control

FileRise: Setup mode re-activates when users.txt becomes empty, allowing unauthenticated admin creation

FileRise: TOTP Bypass via Setup Endpoint Disclosing Existing Secret

FileRise: Folder Metadata Filename Collisions Bypass "read_own" Isolation

FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback