2 matches found
CVE-2025-55135
In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userController.js. Formats other than PNG, JPEG, and WEBP are permitted by server/routes/userRoutes.js; this includes SVG...
6.4CVSS0.00258EPSS
SaveExploits0References6
CVE-2025-55135: Unrestricted Upload of File with Dangerous Type
In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userController.js. Formats other than PNG, JPEG, and WEBP are permitted by server/routes/userRoutes.js; this includes SVG...
6.4CVSS5.8AI score0.00258EPSS
SaveExploits0References1
20