Unrated
imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality.
CVE-2020-23520
First seen on SecPulse
References
- report github.com