CVE-2017-14839

CVE-2017-14839 affects TeamWork Photo Fusion. Connected records corroborate an arbitrary file upload vulnerability in the changeAvatar and changeCover functionality. The core issue is the ability to upload files without proper restriction in these modules, enabling potential impact as described a...