Jirafeau
Version: 4.6.2
Required minimum memory: 256MB
Last updated 23 Jun 2025
Recent Changes
Update Jirafeau to 4.6.3
Fixed the possibility to bypass the checks for CVE-2022-30110 and CVE-2024-12326 (prevent preview of SVG images and other critical files) by sending a manipulated HTTP request with a MIME type like "image/png,text/html". When doing the preview, the MIME type "text/html" takes precedence and you can execute for example JavaScript code.
Compare password hashes using
hash_equals()
About
Jirafeau is a "one-click-filesharing": Select your file, upload, share a link. That's it.
Main features
- One upload - One download link & one delete link
- Shows progression: speed, percentage and remaining upload time
- Preview content in browser (if possible)
- Optional password protection (for uploading or downloading)
- Set expiration time for downloads
- Option to self-destruct after first download
- Shortened URLs using base 64 encoding
- Maximal upload size configurable
- NO database, only use basic PHP
- Simple language support with a lot of langages (help us on weblate!)
- File level Deduplication for storage optimization (does store duplicate files only once, but generate multiple links)
- Optional data encryption
- Small administration interface
- CLI script to remove expired files automatically with a cronjob
- Basic API
- Bash script to upload files via command line
- Themes
Install Jirafeau in a few minutes on your server with Cloudron. To install Cloudron first, follow our setup steps.