Security Advisory

CVE-2021-25971

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-10-20 11:55:17
Last updated 2025-04-30 15:53:12
Assigner Mend
CVSS score 4.3
State PUBLISHED

Description

In Camaleon CMS, versions 2.0.1 to 2.6.0 are vulnerable to an Uncaught Exception. The app's media upload feature crashes permanently when an attacker with a low privileged access uploads a specially crafted .svg file