CVE-2020-23520

imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality...

CVE-2020-23520

creationtimestamp| type| source ---|---|--- 2020-12-09 18:32:50+00:00| seen| https://t.me/cibsecurity/17906 2020-12-09 19:25:39+00:00| seen| https://t.me/cibsecurity/17926 2020-12-09 19:34:08+00:00| seen| https://t.me/cibsecurity/17945 2020-12-09 20:23:06+00:00| seen| https://t.me/cibsecurity/179...

CVE-2020-23520

CVE-2020-23520 affects imcat 5.2. The issue arises from the image/picture upload functionality, where the upload interface does not perform effective authentication filtering, allowing an authenticated user to upload a file that can lead to remote code execution. The connected sources corroborate...