~ / search / GHSA-4v5m-vwvp-p7w8

GHSA-4v5m-vwvp-p7w8

Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-38916

Packages

EcosystemPackageAffectedFixed in
Packagist pagekit/pagekit <= 1.0.18 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files

References

External links from the advisory. They lead to third-party sites.