FileRise is a self‑hosted web‑based file manager. Before 3.24.0, the Pro add‑on endpoint /api/pro/portals/get.php will return a complete internal record of a client portal when called with its slug, even when no user is authenticated. The response contains the internal storage folder path, client contact email, form settings, and upload‑policy details. This enables an attacker who can guess or discover a portal slug to obtain sensitive information about stored files and user contacts. The flaw qualifies as an information‑disclosure vulnerability and involves weak authentication controls.

The affected product is FileRise Pro from the vendor error311. Any installation running a version earlier than 3.24.0 with the Pro add‑on enabled and at least one configured portal is vulnerable. The vulnerability is limited to portals that expose an unknown slug; no direct public listing is required.

The CVSS score of 5.3 indicates a moderate impact. The EPSS score is not available, but the vulnerability can be exploited by any unauthenticated user who knows or can guess a portal slug, which is a relatively low‑effort attack. Because the endpoint is unauthenticated and the data revealed includes internal paths and contact emails, a malicious actor could use the information for social engineering or further reconnaissance. The vulnerability is not currently listed in CISA’s KEV catalog, suggesting no known active exploitation, but patching remains recommended.