CVE-2022-26605

CVE-2022-26605 affects eZiosuite v2.0.7, where an authenticated user can upload arbitrary files through the Avatar upload functionality. The connected Red Hat, NVD, and CVE listings corroborate the issue and its authenticated exploit surface. The root cause, exact vulnerable component/file, and a...