📦 Filerise

FileRise versions before 3.3.0 have an unauthenticated file read vulnerability where anyone can access files in the /uploads directory without authentication by guessing or knowing file paths. This af...

A regression in FileRise version 1.4.0 allows low-privilege users to infer folder visibility and ownership based on folder names, potentially accessing or interacting with other users' content. This a...

FileRise versions before 3.3.0 contain an HTML injection vulnerability that allows authenticated users to modify web page content and potentially add malicious form elements or redirects. This affects...

FileRise versions before 2.2.3 have a stored XSS vulnerability where malicious SVG files containing JavaScript can be uploaded and executed when viewed. This allows attackers to perform actions within...