CVE-2026-104105 Details
Description
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepted time window but does not record that the same account and time step already succeeded. An attacker who has the target account's valid primary credential and captures a TOTP code after its successful use can replay that code from another pending-login session before the window closes. The issue does not by itself disclose the primary credential or TOTP code. This issue is fixed in version 3.23.0.
A vulnerability in FileRise prior to version 3.23.0 allows for TOTP (Time-based One-Time Password) codes to be reused within their validity window, leading to an authentication bypass. The issue arises because the TOTP verification process does not record the time step of successfully used codes, allowing an attacker with access to the target account's primary credential to capture and replay a TOTP code before it expires. This vulnerability has been patched in version 3.23.0.
Users can upgrade to FileRise version 3.23.0, which addresses this vulnerability by enforcing single-use TOTP codes and improving the overall TOTP verification process.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 14, 2026CISA-ADP
Assessed Oct 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/error311/FileRise/security/advisories/GHSA-9pg4-98cx-r82j | CISA-ADP | AdvisoryRemedyVendor |
| https://github.com/error311/FileRise/commit/cc1118923b522baff28dca05bdd79c27f984c68a | [email protected] | Source CodeVendor |
| https://github.com/error311/FileRise/releases/tag/v3.23.0 | [email protected] | Release NotesVendor |
| https://github.com/error311/FileRise/security/advisories/GHSA-9pg4-98cx-r82j | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-287 | Improper Authentication | [email protected] |
| CWE-294 | Authentication Bypass by Capture-replay | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| FileRise | <= 3.22.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 15, 2026 | CVE Modified | CISA-ADP |
| Oct 14, 2026 | New CVE Received | [email protected] |