CVE-2026-1879

creationtimestamp| type| source ---|---|--- 2026-04-01 12:13:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migo3epl5c25...

CVE-2026-1879 Harvard University IQSS Dataverse Theme Customization ThemeAndWidgets.xhtml unrestricted upload

A vulnerability was detected in Harvard University IQSS Dataverse up to 6.8. This affects an unknown function of the file /ThemeAndWidgets.xhtml of the component Theme Customization. Performing a manipulation of the argument uploadLogo results in unrestricted upload. Remote exploitation of the...