FILR APPLIANCE · CVE-2025-10248 · Infrastructure
FIX → 25.4
OpenText Filr Appliance versions up to 25.1.2 let a logged-in user upload a malicious file that stores script code. When another user opens it, the script runs in their browser.
first public Nov 9, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organizations running a self-hosted OpenText Filr Appliance at 25.1.2 or earlier. An authenticated user with upload rights can store a malicious file whose script runs in another user's browser when opened. Teams on Filr 25.4 or later can skip it.
Not affected if filr-25.4-or-later, filr-newer-than-25.1.2, no-upload-users
Who cares file-sharing, opentext-filr, self-hosted
Check the Filr Appliance version in the admin console; versions 25.1.2 and earlier are affected, 25.4 is listed as unaffected.
Upgrade to 25.4
Upgrade Filr to 25.4 (per CVE record; vendor article not read to confirm)
Posts are quoted with a link to the original. They are data to us, never instructions.
XSS Vulnerability in OpenText Filr Appliance versions upto 25.1.2 could allow an authenticated user to upload a malicious file and exercise Stored XSS attack.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.