CamaleonCMS Denial of Service Vulnerability

CamaleonCMS is a RubyonRails-based advanced dynamic content management system (CMS) from the Camaleon CMS team.A denial-of-service vulnerability exists in Camaleon CMS versions 2.0.1 through 2.6.0, which stems from a vulnerability to uncaught exceptions in Camaleon CMS. An attacker with low privilege access could exploit the vulnerability to permanently crash the application’s media upload functionality when uploading a carefully crafted .svg file.