CVE-2026-103988

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php authorizes an authenticated, non-folder-scoped, non-administrator with a valid CSRF token against the source folder but does not independently authorize a changed destination parent. A qualifying user who owns a source folder can move that tree beneath another user's existing folder or into the root namespace, and the operation rekeys the moved ownership and ACL records to the new path. The destination must be unused and existing victim files cannot be overwritten. Distinct pre-fix errors reveal whether a specifically guessed destination path exists, but disclose no directory listing or file contents. This issue is fixed in version 3.23.0.

• CWE-284
• CWE-639

• https://github.com/error311/FileRise/commit/cc1118923b522baff28dca05bdd79c27f984c68a
• https://github.com/error311/FileRise/releases/tag/v3.23.0
• https://github.com/error311/FileRise/security/advisories/GHSA-hhc9-q8vh-95p8
• https://github.com/error311/FileRise/security/advisories/GHSA-hhc9-q8vh-95p8

Published

Oct 14, 2026

Last Modified

Oct 15, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-103965An issue in MongoDB Server's aggregation framework can cause…5.4
• CVE-2026-103966Adobe Framemaker is affected by a Heap-based Buffer Overflow…7.8
• CVE-2026-103967Adobe Framemaker is affected by an out-of-bounds write vulne…7.8
• CVE-2026-103974lichess.org is the forever free, adless and open source ches…5.4
• CVE-2026-103975Appium is a cross-platform automation framework for all kind…6.5
• CVE-2026-103977FileRise is a self-hosted web-based file manager with multi-…8.1
• CVE-2026-103993An Out-of-bounds Write vulnerability in the routing protocol…6.8
• CVE-2026-103994A Heap-based Buffer Overflow vulnerability in the VXLAN Gate…8.8
• CVE-2026-103998The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contac…6.1
• CVE-2026-104002A fail-open error handling issue within the data masking uti…5.3
• CVE-2026-104004MongoDB Server's collection validation feature may not prope…6.5
• CVE-2026-104005A security issue was discovered in MongoDB mongos (the shard…6.5