PT-2020-16404

Name of the Vulnerable Software and Affected Versions HedgeDoc versions prior to 1.7.1 Description The issue allows an unauthenticated attacker to upload arbitrary files, including HTML, JS, and PHP files, to the upload storage backend. This can lead to potential security risks as uploaded files...