Beveiligingsadvies

CVE-2019-12150

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-05-24 15:39:26

Laatst bijgewerkt 2024-08-04 23:10:30

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Karamasoft UltimateEditor 1 does not ensure that an uploaded file is an image or document (neither file types nor extensions are restricted). The attacker must use the Attach icon to perform an upload. An uploaded file is accessible under the UltimateEditorInclude/UserFiles/ URI.

← Alle CVE's bekijken Bekijk op cve.org ↗