~ / search / GHSA-jj62-mc3m-j769

GHSA-jj62-mc3m-j769

FeehiCMS has an arbitrary file upload vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-21516

Packages

EcosystemPackageAffectedFixed in
Packagist feehi/cms < 2.0.8.1 2.0.8.1

Details

As written in the advisory (Markdown source, shown as plain text).

There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8.1 at the head image upload, that allows attackers to execute relevant PHP code.

References

External links from the advisory. They lead to third-party sites.