Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7m4m-66m8-f488

Опубликовано: 29 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 2.6

Описание

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server.

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server.

EPSS

Процентиль: 3%
0.00128
Низкий

2.6 Low

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 2.6
nvd
14 дней назад

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server.

EPSS

Процентиль: 3%
0.00128
Низкий

2.6 Low

CVSS3

Дефекты

CWE-434