The FileRise application contains a missing authentication guard on the file snippet preview endpoint. While the code still enforces ACL checks, an unauthenticated request bypasses the standard session guard and reaches the ACL evaluation logic. If an installation has misconfigured ACLs or uses unusual proxy headers, the endpoint can continue to process the request and return the file content. The effect is a potential disclosure of sensitive file snippets that an attacker could view without valid credentials. However, normal installations with properly configured ACLs and standard HTTP headers do not expose arbitrary file reads; the flaw is limited to environments with specific misconfigurations.

The issue affects all versions of FileRise prior to 3.20.0. This includes self‑hosted deployments of any vendor version that has not applied the 3.20.0 release, regardless of deployment size or operating system.

The CVSS score of 3.7 indicates low overall severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. Exploitation requires the attacker to send unauthenticated HTTP requests that are then processed by the ACL mechanism, which typically demands a misconfigured ACL or an atypical proxy header setup. Because these conditions are uncommon, the practical likelihood of exploitation in the wild is low.