Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38752
HistoryJan 03, 2023 - 12:06 p.m.

Unrestricted File Upload

2023-01-0312:06:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
microweber
unrestricted file upload
plupload filter bypass
remote attacker
file upload vulnerability

EPSS

0.001

Percentile

41.3%

microweber/microweber is vulnerable to unrestricted file upload. The sanitization filter bypass in plupload.php allows a remote authenticated attacker to upload files outside the intended locations.

EPSS

0.001

Percentile

41.3%

Related for VERACODE:38752