Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

error311 — Vulnerabilities & Security Advisories 16

Browse all 16 CVE security advisories affecting error311. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Error311 primarily serves as a web application framework used for building dynamic content management systems. Historically, it has been associated with multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues across its CVE record. The framework's security posture has been compromised through insecure deserialization and improper input validation, leading to several high-severity incidents. Notable characteristics include its widespread adoption in enterprise environments and recurring patterns of authentication bypass vulnerabilities. Security researchers have consistently identified misconfigurations and insufficient access controls as persistent weaknesses, making it a frequent target in exploitation campaigns despite available patches.

Found 16 results / 16 Clear Filters
Top products by error311: FileRise
CVE ID Title CVSS Severity Published
CVE-2026-54459 FileRise: Missing CSRF enforcement for file creation and share-link creation — FileRise CWE-352 4.3 Medium 2026-10-12
CVE-2026-92616 FileRise < 3.28.0 Privilege Escalation via WebDAV Session Inheritance — FileRise CWE-613 6.8 Medium 2026-09-16
CVE-2026-54414 FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover — FileRise CWE-22 9.8 Critical 2026-06-19
CVE-2026-44460 FileRise: TOTP Bypass via Setup Endpoint Disclosing Existing Secret — FileRise CWE-200 7.4 High 2026-05-27
CVE-2026-33477 FileRise has incorrect authorization in /api/file/snippet.php allows read_own users to read other users’ file content — FileRise CWE-863 4.3 Medium 2026-03-26
CVE-2026-33330 FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback — FileRise CWE-863 7.1 High 2026-03-24
CVE-2026-33329 FileRise: Path Traversal in `resumableIdentifier` Leading to Arbitrary File Write, Recursive Directory Deletion, and Limited Existence Oracle — FileRise CWE-22 8.1 High 2026-03-24
CVE-2026-33072 FileRise: Default Encryption Key Enables Token Forgery and Config Decryption — FileRise CWE-798 8.2 High 2026-03-20
CVE-2026-33071 FileRise: WebDAV upload path bypasses filename validation enforced by regular uploads — FileRise CWE-434 4.3 Medium 2026-03-20
CVE-2026-33070 FileRise has Unauthenticated Share Link Deletion — FileRise CWE-306 3.7 Low 2026-03-20
CVE-2026-25231 FileRise affected by an Unauthenticated File Read Due to Insufficient Access Control — FileRise CWE-284 7.5 High 2026-02-09
CVE-2026-25230 FileRise affected by HTML Injection using color property in file tags — FileRise CWE-79 4.6 Medium 2026-02-09
CVE-2025-68116 FileRise vulnerable to Cross-Site Scripting (XSS) in SVG File Handling — FileRise CWE-79 8.9 High 2025-12-16
CVE-2025-66403 FileRise Vulnerable to Stored XSS via SVG Upload — FileRise CWE-79 4.6 Medium 2025-12-01
CVE-2025-62510 FileRise insecure folder visibility via name-based mapping and incomplete ACL checks — FileRise CWE-280 8.1 High 2025-10-20
CVE-2025-62509 FileRise improper ownership/permission validation allowed cross-tenant file operations — FileRise CWE-280 8.1 High 2025-10-20

This page lists every published CVE security advisory associated with error311. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.