EUVD-2026-16277Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization logic validation
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | The CVSS v3.1 score of 4.3 reflects low attack complexity (AC:L), network accessibility (AV:N), and low privileges required (PR:L), but limited scope (S:U) and confidentiality impact (C:L). The SSVC framework indicates exploitation is possible with a proof-of-concept (poc), but automation is not straightforward (Automatable: no), and technical impact is partial (not critical infrastructure failure). The confluence of these signals suggests moderate real-world priority: this is not a critical remote-code-execution or widespread-exploitation scenario, but rather a focused information-disclosure risk affecting multi-tenant FileRise deployments where users with limited folder access could read colleagues' files. Organizations using FileRise in environments with sensitive shared data should prioritize patching; lower-risk isolated deployments may defer. The existence of public exploit code lowers the barrier for opportunistic attacks. |
| Exploit ScenarioDerived | An authenticated user with read_own access to a shared company folder can send a crafted GET request to |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 26, 2026
FileRise versions 2.3.7 through 3.10.0 suffer from improper access control in the file snippet endpoint, allowing authenticated users with read-only access to retrieve file content uploaded by other users in shared folders. An attacker with limited folder permissions can exploit this authorization bypass to view sensitive files beyond their intended access scope. The vulnerability affects FileRise running on PHP and is resolved in version 3.11.0.
Earlier versions of this analysis (1)
FileRise versions 2.3.7 through 3.10.0 allow authenticated users with read-only access to a specific folder to retrieve file snippet previews from files uploaded by other users in that same folder, bypassing intended access controls. The vulnerability stems from improper authorization enforcement in the /api/file/snippet.php endpoint used for hover previews. An authenticated attacker with minimal privileges can exploit this low-complexity network attack to view confidential file contents without explicit permission, affecting data confidentiality. Publicly available exploit code exists, and vendor-released patch version 3.11.0 is available.
RemediationAI
Upgrade FileRise to version 3.11.0 or later immediately, as vendor-released patch version 3.11.0 is confirmed to fix this authorization flaw. Users unable to patch immediately should restrict folder-sharing practices to minimize exposure of sensitive files to users with read_own access, enforce strong authentication for all user accounts, and monitor API access logs for suspicious /api/file/snippet.php requests from low-privileged accounts accessing files outside their own uploads. See vendor advisory at https://github.com/error311/FileRise/security/advisories/GHSA-62wx-vp78-2p83 for detailed patch instructions.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
FileRise (cpe:2.3:a:error311:filerise) is a self-hosted PHP-based file manager application supporting multi-user collaboration with granular folder-level access controls including read-own permissions. The vulnerability is classified under CWE-863 (Incorrect Authorization), indicating that the /api/file/snippet.php endpoint fails to properly validate whether the authenticated user has authorization to read files created by other users before serving snippet content for preview generation. The read_own access level is intended to restrict users to only their own uploaded files, but the snippet endpoint does not enforce this restriction, allowing lateral file enumeration and content disclosure within shared folders.
Know when Filerise gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
Lifecycle Timeline
2DescriptionGitHub Advisory
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In versiosn 2.3.7 through 3.10.0, the file snippet endpoint /api/file/snippet.php allows an authenticated user with only read_own access to a folder to retrieve snippet content from files uploaded by other users in the same folder. This is a server-side authorization flaw in the read_own enforcement for hover previews. Version 3.11.0 fixes the issue.
Executive ViewAI
Organizations using versiosn 2.3.7 should be aware of moderate risk from CVE-2026-33477, a incorrect authorization vulnerability rated CVSS 4.3. Attackers could gain access beyond their authorized level. Organizations should apply vendor updates when available and monitor for exploitation.
Apply vendor patch. If patching is delayed: restrict network access and enable monitoring.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
GitHub
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Malicious file upload attacks exploit insufficient validation when web applications accept user-provided files.
Unauthenticated directory traversal in FileRise prior to version 3.3.0 allows remote attackers to read arbitrary files f
Unauthenticated administrator account takeover in FileRise before 3.16.0 is possible via a path traversal flaw in the sh
Stored cross-site scripting in FileRise versions before 2.2.3 allows an authenticated user with upload rights to embed J
FileRise versions before 3.3.0 contain an HTML injection vulnerability that allows authenticated users to manipulate the
File overwrite in FileRise prior to 3.18.0 allows an unauthenticated visitor who holds a valid upload-enabled shared-fol
FileRise, a self-hosted web file manager and WebDAV server, contains a critical hardcoded encryption key vulnerability i
Authentication bypass in FileRise (CWE-290) lets unauthenticated remote attackers impersonate any account - including an
Online second-factor guessing against FileRise releases prior to 3.23.0 is permitted well beyond the intended limit beca
Multi-factor authentication bypass in FileRise WebDAV prior to 3.16.0 allows an attacker who already holds a valid usern
Authentication bypass in FileRise versions before 3.23.0 lets a remote attacker log in as an existing local account - in
FileRise, a self-hosted web file manager and WebDAV server, contains a path traversal vulnerability in its Resumable.js
FileRise 1.4.0 exposes folder visibility and ownership decisions to authenticated low-privilege users because a regressi
Exploit-DB