Lucene search
PRIOn knowledge basePRION:CVE-2019-12150HistoryMay 24, 2019 - 4:29 p.m.
Design/Logic Flaw
2019-05-2416:29:00
PRIOn knowledge base
www.prio-n.com
5
Karamasoft UltimateEditor 1 does not ensure that an uploaded file is an image or document (neither file types nor extensions are restricted). The attacker must use the Attach icon to perform an upload. An uploaded file is accessible under the UltimateEditorInclude/UserFiles/ URI.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ultimateeditor | eq | 1.0 |
Related
cve
cve
CVE-2019-12150
2019-05-24 16:29:00
nvd
nvd
CVE-2019-12150
2019-05-24 16:29:00
cvelist
cvelist
CVE-2019-12150
2019-05-24 15:39:26