FileRise, a self‑hosted web file manager, contains a symbolic‑link escape flaw that allows an unauthenticated holder of a valid share token to navigate outside the shared folder. By following a symlink that points to a sibling directory under the upload root, a user can list, download, or create a ZIP of files that were not meant to be exposed. This vulnerability permits the disclosure of confidential data located outside the shared folder but within the upload root. The weakness is identified as CWE‑59, representing path traversal via symbolic links.

The affected product is FileRise by error311, in all versions prior to 3.15.0. Attackers must have a public shared‑folder link with subfolder browsing enabled and a valid share token. No specific platform or OS restrictions are mentioned beyond that the service is self‑hosted.

The CVSS score of 4.8 indicates a moderate severity. No EPSS score is available, and the flaw is not listed in CISA’s KEV catalog. The likely attack vector is remote web access via a public shared‑folder link, requiring no authentication beyond possession of the token. Because the flaw is triggered by normal usage features, a determined threat actor could exploit it at any time through the web interface. Moderately high risk arises when attackers can obtain a share token, which is often published or leaked.