CVE-2026-33330 - Vulnerability Analysis

Overview

FileRise < 3.10.0 contains a broken access control vulnerability in ONLYOFFICE integration, letting authenticated users with read-only access forge save callback URLs to overwrite files with attacker-controlled content.

Severity & Score

Impact

Authenticated users with read-only access can overwrite files with malicious content, leading to data tampering.

Mitigation

Upgrade to version 3.10.0 or later.

References

• https://github.com/error311/FileRise/commit/3871f9fd1661688bed4f7dd23912be0ebf50973c
• https://github.com/error311/FileRise/releases/tag/v3.10.0
• https://github.com/error311/FileRise/security/advisories/GHSA-6c3j-f4x4-36m3

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner