Unrestricted file upload

2023-03-2917:15:00

PRIOn knowledge base

www.prio-n.com

atrocore

1.5.25

create import feed

unauthenticated file upload

vulnerability

nvd

9.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%

In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload.

CPENameOperatorVersion
atrocoreeq1.5.25

CPE	Name	Operator	Version
	atrocore	eq	1.5.25

References

github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/atrocore/atrocore-1.5.25