Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2026/03/09 7:53 p.m.6 views

CVE-2026-3748

A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java of the component SVG File Handler. Performing a manipulation results in unrestricted upload. Remote exploitati...

8.8CVSS5.4AI score0.00482EPSS
Exploits1References1
EUVD
EUVD
added 2026/03/08 6:30 p.m.5 views

EUVD-2026-10252

A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation can lead to unrestricted upload. The...

6.5CVSS6.2AI score0.00422EPSS
Exploits1References10
NVD
NVD
added 2026/03/08 4:16 p.m.9 views

CVE-2026-3749

A weakness has been identified in Bytedesk up to 1.3.9. This vulnerability affects the function handleFileUpload of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestService.java of the component SVG File Handler. Executing a manipulation can lead to unrestricted upload. The...

8.8CVSS0.00422EPSS
Exploits1References9
CVE
CVE
added 2026/03/08 4:2 p.m.19 views

CVE-2026-3748

A CVE-2026-3748 vulnerability affects Bytedesk up to 1.3.9 in the SVG File Handler’s UploadRestController.uploadFile function. The flaw allows unrestricted file upload via manipulation of the uploadFile endpoint, with remote exploitation reported as possible and the exploit released publicly. A f...

8.8CVSS6.2AI score0.00482EPSS
Exploits1References9Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/08 12:0 a.m.12 views

PT-2026-23954

A security flaw has been discovered in Bytedesk up to 1.3.9. This affects the function uploadFile of the file source-code/src/main/java/com/bytedesk/core/upload/UploadRestController.java of the component SVG File Handler. Performing a manipulation results in unrestricted upload. Remote exploitati...

6.5CVSS5.4AI score0.00482EPSS
Exploits1References10
Rows per page
Query Builder