Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38752
HistoryJan 03, 2023 - 12:06 p.m.

Unrestricted File Upload

2023-01-0312:06:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
microweber
unrestricted file upload
plupload filter bypass
remote attacker
file upload vulnerability

0.001 Low

EPSS

Percentile

34.8%

microweber/microweber is vulnerable to unrestricted file upload. The sanitization filter bypass in plupload.php allows a remote authenticated attacker to upload files outside the intended locations.

0.001 Low

EPSS

Percentile

34.8%

Related for VERACODE:38752