Lucene search

K
osvGoogleOSV:GHSA-J8JP-9X42-4PJ5
HistoryFeb 27, 2022 - 12:00 a.m.

Unrestricted Upload of File with Dangerous Type in MODX Revolution

2022-02-2700:00:14
Google
osv.dev
13

0.017 Low

EPSS

Percentile

87.9%

MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting can be changed by an administrator.

0.017 Low

EPSS

Percentile

87.9%