CVE-2023-52086
resumable.php (aka PHP backend for resumable.js) 0.1.4 before 3c6dbf5 allows arbitrary file upload anywhere in the filesystem via ../ in multipart/for...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
resumable.php (aka PHP backend for resumable.js) 0.1.4 before 3c6dbf5 allows arbitrary file upload anywhere in the filesystem via ../ in multipart/form-data content to upload.php. (File overwrite hasn't been possible with the code available in GitHub in recent years, however.)
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- report github.com
- web github.com
- web github.com
- web github.com