CVE-2026-69194— FileRise: Unsanitized footerHtml in Public Site Config
一分钟漏洞结论
影响对象
error311 FileRise
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise returns the stored branding.footerHtml value through the unauthenticated public site configuration API without server-side sanitiz
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-69194 基础信息
漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
FileRise: Unsanitized footerHtml in Public Site Config
来源: CVE Program / CVE List V5
Vulnerability Description
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise returns the stored branding.footerHtml value through the unauthenticated public site configuration API without server-side sanitization. The FileRise frontend already sanitizes this value before rendering it into the page, using an allowlist of simple footer tags and safe link handling. The unauthenticated public config API exposed raw admin-provided footer HTML to clients, which is still undesirable and could be unsafe for alternate clients or future render paths. An administrator must first store the malicious footer value. This issue is fixed in version 3.21.0.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
来源: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
来源: CVE Program / CVE List V5
受影响产品
二、漏洞 CVE-2026-69194 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-69194 的情报信息
请登录查看更多情报信息。
CVE-2026-69194 其他参考 (2)
-
Release v3.21.0 · error311/FileRise · GitHub x_refsource_MISC
同批安全公告 · error311 · 2026-10-14 · 共 22 条
| CVE-2026-61843 | 8.2 HIGH | FileRise: Unauthenticated File Overwrite Through Upload-Enabled Folder Shares |
| CVE-2026-57489 | 8.1 HIGH | FileRise: AUTH_BYPASS reverse-proxy header trust without source IP validation enables full |
| CVE-2026-57490 | 8.1 HIGH | FileRise: WebDAV authentication bypasses TOTP/MFA entirely |
| CVE-2026-103977 | 8.1 HIGH | FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts |
| CVE-2026-104108 | 8.1 HIGH | FileRise OIDC login can bind an attacker identity to an existing local account |
| CVE-2026-57492 | 7.4 HIGH | FileRise: Setup mode re-activates when users.txt becomes empty, allowing unauthenticated a |
| CVE-2026-61844 | 7.1 HIGH | FileRise: Folder Metadata Filename Collisions Bypass "read_own" Isolation |
| CVE-2026-104109 | 6.8 MEDIUM | FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files ou |
| CVE-2026-57493 | 6.8 MEDIUM | FileRise: Remember-me auto-login uses stale admin role from token instead of current role |
| CVE-2026-104107 | 6.5 MEDIUM | FileRise: Authenticated path traversal escapes configured storage root through inherited A |
| CVE-2026-104106 | 6.5 MEDIUM | FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activ |
| CVE-2026-57491 | 6.5 MEDIUM | FileRise: ZIP extraction writes blocked file extensions to disk, bypassing the upload bloc |
| CVE-2026-69193 | 6.5 MEDIUM | FileRise: Rate Limiting Bypass via Username Rotation Enables Unlimited Password Spraying |
| CVE-2026-104105 | 6.4 MEDIUM | FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its wi |
| CVE-2026-77427 | 5.9 MEDIUM | FileRise: Insecure default cryptographic key fallback in manual installs |
| CVE-2026-103988 | 5.4 MEDIUM | FileRise renameFolder omits destination-parent authorization |
| CVE-2026-69191 | 5.4 MEDIUM | FileRise: Login Method Restriction Bypass via Direct API Access |
| CVE-2026-62664 | 5.4 MEDIUM | FileRise: Authenticated path traversal in createFolder allows arbitrary directory creation |
| CVE-2026-104110 | 5.3 MEDIUM | FileRise: Unauthenticated disclosure of internal folder path, client email, and upload pol |
| CVE-2026-55498 | 4.8 MEDIUM | FileRise Shared Folder Symlink Escape |
显示前 20 条，共 22 条。 查看全部 → →
IV. Related Vulnerabilities
Same product: FileRise
-
CVE-2026-104109
FileRise: Authenticated ZIP extraction follows a pre-existin -
CVE-2026-104107
FileRise: Authenticated path traversal escapes configured st -
CVE-2026-104110
FileRise: Unauthenticated disclosure of internal folder path -
CVE-2026-104108
FileRise OIDC login can bind an attacker identity to an exis -
CVE-2026-103977
FileRise: Session-scoped TOTP rate limiting permits repeated
Same vendor: error311
-
CVE-2026-104109
FileRise: Authenticated ZIP extraction follows a pre-existin -
CVE-2026-104107
FileRise: Authenticated path traversal escapes configured st -
CVE-2026-104110
FileRise: Unauthenticated disclosure of internal folder path -
CVE-2026-104108
FileRise OIDC login can bind an attacker identity to an exis -
CVE-2026-103977
FileRise: Session-scoped TOTP rate limiting permits repeated
Same weakness: CWE-79
-
CVE-2026-108491
WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripti -
CVE-2026-108498
WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scrip -
CVE-2026-47790
Privilege Escalation via QuFTP Log-based XSS -
CVE-2026-39991
Stored Cross-Site Scripting (XSS) in Note Station file uploa -
CVE-2026-22896
Stored XSS via Interface Name in Network & Virtual Switch Ap
V. Comments for CVE-2026-69194
暂无评论