PT-2023-10336 · Unknown · Fabarea Media Upload

Name of the Vulnerable Software and Affected Versions: fabarea media upload versions prior to 0.9.0 Description: A critical vulnerability has been found in the function getUploadedFileList of the file Classes/Service/UploadFileService.php, which leads to pathname traversal. Recommendations: For...