CVE-2023-51803

LinuxServer.io Heimdall versions prior to 2.5.7 are vulnerable to an arbitrary file upload flaw in the Icon Handler . The software fails to prevent the use of icons containing non-image data, such as the substring, allowing an attacker to upload and remotely execute PHP shells . Practical impact...