Lucene search
+L
1upOneupuploaderbundle

1 matches found

CVE
CVE
added 2020/02/05 1:55 p.m.80 views

CVE-2020-5237

CVE-2020-5237 : Multiple relative path traversal vulnerabilities in the OneupUploaderBundle (oneup/uploader-bundle) before versions 1.9.3 and 2.1.5. An attacker can manipulate various upload parameters (BlueimpController.php, DropzoneController.php, FineUploaderController.php, MooUploadController...

8.8CVSS8.9AI score0.03929EPSS
SaveWeb