CVE-2026-104105
FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay)
CVSS Score
6.4
EPSS Score
0.0%
EPSS Percentile
0th
FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepted time window but does not record that the same account and time step already succeeded. An attacker who has the target account's valid primary credential and captures a TOTP code after its successful use can replay that code from another pending-login session before the window closes. The issue does not by itself disclose the primary credential or TOTP code. This issue is fixed in version 3.23.0.
| CWE | CWE-287 CWE-294 |
| Vendor | error311 |
| Product | filerise |
| Published | Oct 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for error311 filerise
Be the first to know when new medium vulnerabilities affecting error311 filerise are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
error311 / FileRise
< 3.23.0