~ / search / GHSA-67mh-hw8v-x8v9

GHSA-67mh-hw8v-x8v9

FeehiCMS Unrestricted Upload vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-36573

Packages

EcosystemPackageAffectedFixed in
Packagist feehi/feehicms <= 2.1.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

File Upload vulnerability in Feehi CMS thru 2.1.1 allows attackers to run arbitrary code via crafted image upload.

References

External links from the advisory. They lead to third-party sites.