CVE-2023-3796

A vulnerability, which was classified as problematic, has been found in Bug Finder Foody Friend 1.0. Affected by this issue is some unknown functionality of the file /user/profile of the component Profile Picture Handler. The manipulation of the argument profilepicture leads to unrestricted uploa...

CVE-2023-3796

CVE-2023-3796 affects Bug Finder Foody Friend 1.0, specifically the Profile Picture Handler’s /user/profile and the profile_picture parameter. The issue permits unrestricted file uploads via remote access, as described across multiple feeds (NVD, Red Hat, CVE records, and industry sources). The v...