CVE-2023-51803

LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "" substring...

CVE-2023-51803

LinuxServer.io Heimdall versions prior to 2.5.7 are vulnerable to an arbitrary file upload flaw in the Icon Handler . The software fails to prevent the use of icons containing non-image data, such as the substring, allowing an attacker to upload and remotely execute PHP shells . Practical impact...