~ / search / GHSA-5m3m-q8cq-77g4

GHSA-5m3m-q8cq-77g4

fuadmin vulnerable to insecure file upload

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-36097

Packages

EcosystemPackageAffectedFixed in
Packagist funadmin/funadmin >= 3.3.2, <= 3.3.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

funadmin v3.3.2 and v3.3.3 are vulnerable to insecure file upload via the plugins install.

References

External links from the advisory. They lead to third-party sites.