CVE-2021-41919

creationtimestamp| type| source ---|---|--- 2021-10-08 20:40:28+00:00| seen| https://t.me/cibsecurity/30260...

CVE-2021-41919

webTareas version 2.4 and earlier allows an authenticated user to arbitrarily upload potentially dangerous files without restrictions. This is working by adding or replacing a personal profile picture. The affected endpoint is /includes/upload.php on the HTTP POST data. This allows an attacker to...