CVE WATCH / VULNERABILITY DETAIL

CVE-2026-103988

MEDIUMCVSS 5.4NVD feed

Published 14 October 2026 · tracked since 15 October 2026

Description

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php authorizes an authenticated, non-folder-scoped, non-administrator with a valid CSRF token against the source folder but does not independentl

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools