Описание
Duplicate Advisory: Unrestricted file upload of user avatar images
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-xrvh-rvc4-5m43. This link is maintained to preserve external references.
Original Description
An arbitrary file upload vulnerability in the Profile Image module of Kirby CMS v4.1.0 allows attackers to execute arbitrary code via a crafted PDF file.
Пакеты
Наименование
getkirby/cms
composer
Затронутые версииВерсия исправления
<= 4.1.0
4.1.1