Bludit Remote Code Execution (CVE-2020-18879)

A remote code execution vulnerability exists in Bludit. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-18879

CVE-2020-18879 affects Bludit v3.8.1 via an unrestricted file upload in the component bl-kereln/ajax/upload-logo.php, allowing remote code execution with uploaded malicious files. The vulnerability is documented with a high/critical impact (NVD CVSS v3.1 base score 9.8, CRITICAL) and a network-ac...