Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FileRise is a self-hosted web file manager / WebDAV server. Prior to 3.3.0, an HTML Injection vulnerability allows an authenticated user to modify the DOM and add e.g. form elements that call certain endpoints or link elements that redirect the user on active interaction. This vulnerability is fixed in 3.3.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25230 HTML Injection Vulnerability in FileRise Web File Manager Before 3.3.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25230
Post summary
The text announces the discovery of an HTML injection vulnerability in FileRise Web File Manager versions prior to 3.3.0, providing only the vulnerability type without any PoC, exploit, patch, or active exploitation details.
CVE-2026-25230 FileRise is a self-hosted web file manager / WebDAV server. Prior to 3.3.0, an HTML Injection vulnerability allows an authenticated user to modify the DOM and add e.g… https://www.cve.org/CVERecord?id=CVE-2026-25230
Post summary
The statement reports CVE‑2026‑25230 as an HTML injection flaw in FileRise that lets authenticated users modify the DOM; it lacks any PoC, exploit code, active exploitation evidence, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | filerise | filerise | - | - | - |