CVE-2026-103988

Name of the Vulnerable Software and Affected Versions FileRise versions prior to 3.23.0

Description An authorization flaw exists in the '/api/folder/renameFolder.php' endpoint. While the system verifies the user's authority over the source folder and validates the CSRF token, it fails to independently authorize the destination parent folder. This allows an authenticated user who is not an administrator to move a folder tree they own into the root namespace or beneath another user's folder. This operation rekeys the ownership and Access Control List (ACL) records to the new path. The destination must be unused, as existing files cannot be overwritten. Additionally, specific error messages can be used to determine if a guessed destination path exists, although they do not disclose directory listings or file contents.

Recommendations Update to version 3.23.0. As a temporary mitigation, restrict access to the '/api/folder/renameFolder.php' endpoint for non-administrator users.