Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4539
HistoryJul 06, 2017 - 2:29 a.m.

Remote File Upload

2017-07-0602:29:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0.001

Percentile

40.4%

kindeditor is vulnerable to remote file upload. The library does not check whether a user has the permission to upload files to the system, allowing a malicious user to upload an arbitrary file to the system through a POST request to the php/upload_json.php file.

EPSS

0.001

Percentile

40.4%

Related for VERACODE:4539