Lucene search

K
osvGoogleOSV:GHSA-3V5X-QJRP-Q2HQ
HistoryApr 13, 2022 - 12:00 a.m.

Unrestricted Upload of File with Dangerous Type in ButterCMS

2022-04-1300:00:24
Google
osv.dev
19
buttercms
file upload
arbitrary code
svg
vulnerability

EPSS

0.005

Percentile

76.9%

An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a crafted SVG file.

EPSS

0.005

Percentile

76.9%

Related for OSV:GHSA-3V5X-QJRP-Q2HQ