GHSA-rm34-fg4m-39mw
OpenSTAManager contains an arbitrary file upload vulnerability in its module update functionality
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | devcode-it/openstamanager | <= 2.10-beta | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
OpenSTAManager versions 2.10 and earlier contain an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_modules.php).
References
External links from the advisory. They lead to third-party sites.