CVE-2019-12548

2019-06-0320:38:32

mitre

www.cve.org

9 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.4%

JSON

Bludit before 3.9.0 allows remote code execution for an authenticated user by uploading a php file while changing the logo through /admin/ajax/upload-logo.

References

github.com/bludit/bludit/commit/d0843a4070c7d7fa596a7eb2130be15383013487

github.com/bludit/bludit/compare/5e5957c...77e85e7

github.com/bludit/bludit/releases/tag/3.9.0