Security Advisory

CVE-2023-29770

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-11-27 00:00:00

Last updated 2024-08-02 14:14:39

Assigner mitre

CVSS score not scored

State PUBLISHED

In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filtering.