CVE-2026-104110CWE-200CWE-306information-disclosure

CVE-2026-104110

Medium · published October 15, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
35.1
In the wild
Unconfirmed
What it is

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.24.0, FileRise Pro /api/pro/portals/get.php returns a configured client portal's full internal record to an unauthenticated caller who knows or guesses the portal slug. The response includes the internal storage folder path, client contact email, form settings, and upload-policy details, while the separate publicMeta.php endpoint intentionally exposes only curated branding data. Exploitation requires the Pro add-on and at least one configured portal. This issue is fixed in version 3.24.0.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00418 · 35.1th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-306 · Missing Authentication for Critical Function
Published
2026-10-15T01:17Z
References (4)
https://github.com/error311/FileRise/commit/1bf1f44d221398dcf6484520d0905e1f4bf319c7 · [email protected]https://github.com/error311/FileRise/releases/tag/v3.24.0 · [email protected]https://github.com/error311/FileRise/security/advisories/GHSA-m49m-9v4m-w2rq · [email protected]https://github.com/error311/FileRise/security/advisories/GHSA-m49m-9v4m-w2rq · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 16 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 14 OCT 20:40Z
    FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php
    cvelistv5
  • 14 OCT 20:40Z
    FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php
    cvelistv5