CVE-2023-51803

2024-04-0100:15:49

Google

osv.dev

linuxserver.io

heimdall

vulnerability

non-image data

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

JSON

LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the “<?php ?>” substring.

CPENameOperatorVersion
heimdalleq2.2.1
heimdalleq1.4.15
heimdalleqV2.4.5
heimdalleq2.4.3
heimdalleq2.2.0
heimdalleq1.1.1
heimdalleq2.1.0
heimdalleq2.1.10
heimdalleq2.5.0
heimdalleq2.3.1

Name	Operator	Version
heimdall	eq	2.2.1
heimdall	eq	1.4.15
heimdall	eq	V2.4.5
heimdall	eq	2.4.3
heimdall	eq	2.2.0
heimdall	eq	1.1.1
heimdall	eq	2.1.0
heimdall	eq	2.1.10
heimdall	eq	2.5.0
heimdall	eq	2.3.1