Extension Blacklist Bypass

Kunstmaan CMS MediaBundle is vulnerable to an Extension Blacklist Bypass. The vulnerability is due to a case‑sensitive blacklist check performed in FileHandler::getFilePath and the subsequent lower‑casing of the stored extension, where an attacker can upload a file with a mixed‑case executable...