CVE-2026-25230 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

FileRise is a self-hosted web file manager / WebDAV server. Prior to 3.3.0, an HTML Injection vulnerability allows an authenticated user to modify the DOM and a…
Medium CVSS: 4.6

CVE-2026-25230

FileRise is a self-hosted web file manager / WebDAV server. Prior to 3.3.0, an HTML Injection vulnerability allows an authenticated user to modify the DOM and add e.g. form elements that call certain endpoints or link elements that redirect the user on active interaction. This vulnerability is fixed in 3.3.0.
Vendor
Filerise
Product
Filerise
CWE
CWE-79
Yayın Tarihi
2026-02-09 20:15:56
Güncelleme
2026-02-19 20:02:58
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Filerise MEDIUM Filerise 2026

Referanslar

https://github.com/error311/FileRise/blob/7fee135a5b8feb25558aba0474bd6bb53943fc88/src/controllers/FileController.php#L4016-L4058 https://github.com/error311/FileRise/blob/7fee135a5b8feb25558aba0474bd6bb53943fc88/src/models/FileModel.php#L3146 https://github.com/error311/FileRise/releases/tag/v3.3.0 https://github.com/error311/FileRise/security/advisories/GHSA-h8fw-42v6-gfhv