CVE-2025-27411
REDAXO allows Arbitrary File Upload in the mediapool page
Résumé
REDAXO allows Arbitrary File Upload in the mediapool page
Description d'origine
La description telle que publiée par la source (souvent en anglais).
REDAXO is a PHP-based CMS. In Redaxo before 5.18.3, the mediapool/media page is vulnerable to arbitrary file upload. This vulnerability is fixed in 5.18.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com