Beveiligingsadvies

CVE-2022-23626

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-02-08 22:00:12

Laatst bijgewerkt 2025-04-22 18:22:30

Toegewezen door GitHub_M

CVSS-score 8.5

Status PUBLISHED

Beschrijving

m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions `imagecreatefrom*` and `image*` have not been checked properly. Although PHP issued warnings and the upload function returned `false`, the original file (that could contain a malicious payload) was kept on the disk. Users are advised to upgrade as soon as possible. There are no known workarounds for this issue.

← Alle CVE's bekijken Bekijk op cve.org ↗