Описание
GrapesJsBuilder File Upload allows all file uploads
Summary
Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted.
Impact
If the media folder is not restricted from running files this can lead to a remote code execution.
Пакеты
Наименование
mautic/grapes-js-builder-bundle
composer
Затронутые версииВерсия исправления
>= 4.0.0, < 4.4.18
4.4.18
Наименование
mautic/grapes-js-builder-bundle
composer
Затронутые версииВерсия исправления
>= 5.0.0, < 5.2.9
5.2.9
Наименование
mautic/grapes-js-builder-bundle
composer
Затронутые версииВерсия исправления
>= 6.0.0, < 6.0.7
6.0.7
Связанные уязвимости
nvd
2 месяца назад
Summary Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution.