CVE-2022-26605

eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality...

CVE-2022-26605

CVE-2022-26605 affects eZiosuite v2.0.7, where an authenticated user can upload arbitrary files through the Avatar upload functionality. The connected Red Hat, NVD, and CVE listings corroborate the issue and its authenticated exploit surface. The root cause, exact vulnerable component/file, and a...