CVE-2020-18190

Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-picture...

CVE-2020-18190

Bludit v3.8.1 is affected by a directory traversal vulnerability in the upload-profile-picture endpoint (/admin/ajax/upload-profile-picture). The flaw allows remote attackers to delete arbitrary files on the server. This is a path traversal issue in the upload handling, enabling statements about ...