CVE-2021-41919

webTareas version 2.4 and earlier allows an authenticated user to arbitrarily upload potentially dangerous files without restrictions. This is working by adding or replacing a personal profile picture. The affected endpoint is /includes/upload.php on the HTTP POST data. This allows an attacker to...

CVE-2021-41919

The CVE-2021-41919 entry affects webTareas 2.4 and earlier. The vulnerability stems from an upload vulnerability in the /includes/upload.php endpoint, where an authenticated user can upload or replace files, enabling potential code or malware injection and, under certain conditions, code executio...