fineuploader/php-traditional-server · Security
FineUploader php-traditional-server unauthenticated arbitrary file upload vulnerability
- GHSA ID
- GHSA-j78w-6r73-22vh
- CVE ID
- CVE-2018-9209
- Severity
- critical
- Published
- Updated
- CVSS
- 9.8 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS v3
- 9.8 · CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Unauthenticated arbitrary file upload vulnerability in FineUploader php-traditional-server <= v1.2.2
CWEs
- CWE-434 · Unrestricted Upload of File with Dangerous Type