https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T03:58:16.504722+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-33330 CVE-2026-33330 — FileRise ONLYOFFICE integration allows read-only users to overwrite files via forged save callback 2026-10-07T03:58:16.521475+00:00

Affected: error311 FileRise

FileRise is a self-hosted web file manager / WebDAV server. Prior to version 3.10.0, a broken access control issue in FileRise's ONLYOFFICE integration allows an authenticated user with read-only access to obtain a signed save callbackUrl for a file and then directly forge the ONLYOFFICE save callback to overwrite that file with attacker-controlled content. This issue has been patched in version 3.10.0.