CVE-2026-69194
MEDIUM 4.8FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise returns the stored branding.footerHtml value through the unauthenticated public site configuration API without server-side sanitization. The FileRise frontend already sanitizes this value before rendering it into the page, using an allowlist of simple footer tags and safe link handling. The unauthenticated public config API exposed raw admin-provided footer HTML to clients, which is still undesirable and could be unsafe for alternate clients or future render paths. An administrator must first store the malicious footer value. This issue is fixed in version 3.21.0.
No known exploitation, public exploit, or elevated probability at this time. Track for changes.
Exploitation likelihood
0.2%chance of exploitation in 30 days · 13th percentile
Impact if exploited
4.8CVSS 3.1 · MEDIUM
- ConfidentialityLow
- IntegrityLow
- AvailabilityNone
What an attacker needs
- ✓Access: Reachable over the network — no local access needed
- ⚠Privileges: Requires an admin / high-privilege account
- ⚠User interaction: A user must take an action (click / open a file)
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
Weakness (CWE)
- CWE-79: : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
References and research data (JSON)
All CVSS metrics
- MEDIUM 4.8 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N - MEDIUM 4.8 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
References
Exploit-tagged references (not proof of a PoC)
- https://github.com/error311/FileRise/security/advisories/GHSA-rmwm-wq9g-583g CVE record · GitHub_M · Updated 2026-10-14T20:32:01.344Z
CVE record · CISA-ADP · Updated 2026-10-15T15:30:30.030Z
NVD · CVE-2026-69194 · Updated 2026-10-15T16:18:19.620
Advisories
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101678 EUVD · EUVD-2026-101678
Technical & other
- https://github.com/error311/FileRise/commit/613fdb28ca25e6dcc9bdfa590757b53935fad8da CVE record · GitHub_M · Updated 2026-10-14T20:32:01.344Z
NVD · CVE-2026-69194 · Updated 2026-10-15T16:18:19.620 - https://github.com/error311/FileRise/releases/tag/v3.21.0 CVE record · GitHub_M · Updated 2026-10-14T20:32:01.344Z
NVD · CVE-2026-69194 · Updated 2026-10-15T16:18:19.620