FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage root

FileRise: Remember-me auto-login uses stale admin role from token instead of current role

FileRise < 3.28.0 Privilege Escalation via WebDAV Session Inheritance

FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs

FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verification

FileRise: Rate Limiting Bypass via Username Rotation Enables Unlimited Password Spraying

FileRise: ZIP extraction writes blocked file extensions to disk, bypassing the upload blocklist

FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay)

FileRise: Insecure default cryptographic key fallback in manual installs

FileRise renameFolder omits destination-parent authorization

FileRise: Login Method Restriction Bypass via Direct API Access

FileRise: Authenticated path traversal in createFolder allows arbitrary directory creation outside the upload root

FileRise affected by HTML Injection using color property in file tags

FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php

FileRise: Unsanitized footerHtml in Public Site Config

FileRise Shared Folder Symlink Escape

FileRise has Unauthenticated Share Link Deletion

FileRise: Missing CSRF enforcement for file creation and share-link creation

FileRise has incorrect authorization in /api/file/snippet.php allows read_own users to read other users’ file content