CVE-2026-25231

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-25231", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-01-30T14:44:47.328Z", "datePublished": "2026-02-09T18:34:36.858Z", "dateUpdated": "2026-02-10T16:01:25.905Z"}, "containers": {"cna": {"title": "FileRise affected by an Unauthenticated File Read Due to Insufficient Access Control", "problemTypes": [{"descriptions": [{"cweId": "CWE-284", "lang": "en", "description": "CWE-284: Improper Access Control", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-552", "lang": "en", "description": "CWE-552: Files or Directories Accessible to External Parties", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/error311/FileRise/security/advisories/GHSA-hv99-77cw-hvpr", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/error311/FileRise/security/advisories/GHSA-hv99-77cw-hvpr"}, {"name": "https://github.com/error311/FileRise/releases/tag/v3.3.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/error311/FileRise/releases/tag/v3.3.0"}], "affected": [{"vendor": "error311", "product": "FileRise", "versions": [{"version": "< 3.3.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-02-09T18:34:36.858Z"}, "descriptions": [{"lang": "en", "value": "FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 3.3.0, the application contains an unauthenticated file read vulnerability due to the lack of access control on the /uploads directory. Files uploaded to this directory can be accessed directly by any user who knows or can guess the file path, without requiring authentication. As a result, sensitive data could be exposed, and privacy may be breached. This vulnerability is fixed in 3.3.0."}], "source": {"advisory": "GHSA-hv99-77cw-hvpr", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-10T15:39:55.256400Z", "id": "CVE-2026-25231", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-10T16:01:25.905Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-25231", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-10T15:39:55.256400Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-10T15:39:56.020Z"}}], "cna": {"title": "FileRise affected by an Unauthenticated File Read Due to Insufficient Access Control", "source": {"advisory": "GHSA-hv99-77cw-hvpr", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "error311", "product": "FileRise", "versions": [{"status": "affected", "version": "< 3.3.0"}]}], "references": [{"url": "https://github.com/error311/FileRise/security/advisories/GHSA-hv99-77cw-hvpr", "name": "https://github.com/error311/FileRise/security/advisories/GHSA-hv99-77cw-hvpr", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/error311/FileRise/releases/tag/v3.3.0", "name": "https://github.com/error311/FileRise/releases/tag/v3.3.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 3.3.0, the application contains an unauthenticated file read vulnerability due to the lack of access control on the /uploads directory. Files uploaded to this directory can be accessed directly by any user who knows or can guess the file path, without requiring authentication. As a result, sensitive data could be exposed, and privacy may be breached. This vulnerability is fixed in 3.3.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284: Improper Access Control"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-552", "description": "CWE-552: Files or Directories Accessible to External Parties"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-02-09T18:34:36.858Z"}}}, "cveMetadata": {"cveId": "CVE-2026-25231", "state": "PUBLISHED", "dateUpdated": "2026-02-10T16:01:25.905Z", "dateReserved": "2026-01-30T14:44:47.328Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-02-09T18:34:36.858Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "FileRise", "vendor": "error311", "versions": [{"status": "affected", "version": "< 3.3.0"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:filerise:filerise:*:*:*:*:*:*:*:*", "matchCriteriaId": "20EF81AB-DD02-41FF-9DCC-6498CF4C595A", "versionEndExcluding": "3.3.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "FileRise is a self-hosted web file manager / WebDAV server. Versions prior to 3.3.0, the application contains an unauthenticated file read vulnerability due to the lack of access control on the /uploads directory. Files uploaded to this directory can be accessed directly by any user who knows or can guess the file path, without requiring authentication. As a result, sensitive data could be exposed, and privacy may be breached. This vulnerability is fixed in 3.3.0."}, {"lang": "es", "value": "FileRise es un gestor de archivos web autoalojado / servidor WebDAV. En versiones anteriores a la 3.3.0, la aplicaci\u00f3n contiene una vulnerabilidad de lectura de archivos no autenticada debido a la falta de control de acceso en el directorio /uploads. Los archivos subidos a este directorio pueden ser accedidos directamente por cualquier usuario que conozca o pueda adivinar la ruta del archivo, sin requerir autenticaci\u00f3n. Como resultado, datos sensibles podr\u00edan quedar expuestos y la privacidad podr\u00eda verse comprometida. Esta vulnerabilidad est\u00e1 corregida en la 3.3.0."}], "id": "CVE-2026-25231", "lastModified": "2026-06-17T10:24:20.713", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-25231", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-10T15:39:55.256400Z", "version": "2.0.3"}}]}, "published": "2026-02-09T20:15:56.863", "references": [{"source": "security-advisories@github.com", "tags": ["Release Notes"], "url": "https://github.com/error311/FileRise/releases/tag/v3.3.0"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/error311/FileRise/security/advisories/GHSA-hv99-77cw-hvpr"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}, {"lang": "en", "value": "CWE-552"}], "source": "security-advisories@github.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-552"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,3.3.0)"}}], "product": "filerise", "vendor": "error311"}], "analysis": {"en": {"generated_at": "2026-04-17T21:20:32.554115+00:00", "value": {"mitigation_remediation": ["Upgrade FileRise to version 3.3.0 or newer, which implements proper access control on the uploads directory.", "Configure the web server or FileRise settings to deny unauthenticated access to the /uploads directory (for example, by using .htaccess rules, IP whitelisting, or filesystem permissions).", "Validate and sanitize all uploaded filenames and paths to restrict them to an allowed set, preventing attackers from guessing or crafting URLs to sensitive files."], "summary": {"action": "Immediate Patch", "impact": "Unauthenticated File Read"}, "threat_synthesis": {"affected_systems": "The vulnerability affects all deployments of FileRise versions earlier than 3.3.0. Users running the self\u2011hosted web file manager or WebDAV server before this release are at risk.\n", "description_and_impact": "A flaw in the FileRise web file manager allows any user, even without authentication, to read files stored in the /uploads directory simply by knowing or guessing the URL path. Because there is no access control on that directory, the attacker can expose sensitive documents and personal data, resulting in a breach of confidentiality and potential privacy violations.\n", "risk_and_exploitability": "The CVSS base score is 7.5, classifying the issue as high severity. An EPSS score lower than 1% indicates a very low probability of exploitation in the wild, and the flaw is not recorded in the CISA KEV catalog. An attacker can exploit the weakness by issuing a simple HTTP GET request to /uploads/<filename> without providing credentials, making the attack straightforward once the path is discovered or guessed."}}}}, "created": "2026-02-10T11:35:17.774524+00:00", "updated": "2026-04-17T21:30:28.385993+00:00", "vendors": ["error311", "error311$PRODUCT$filerise"]}