Description

Arbitrary file upload in jQuery Upload File <= 4.0.2

Remediation

References

http://www.vapidlabs.com/advisory.php?v=206

Related Vulnerabilities

CVE-2023-36472 Vulnerability in npm package @strapi/plugin-content-manager

CVE-2021-40660 Vulnerability in maven package org.javadelight:delight-nashorn-sandbox

CVE-2021-21344 Vulnerability in maven package com.thoughtworks.xstream:xstream

CVE-2020-28865 Vulnerability in maven package com.github.kfcfans:powerjob

CVE-2019-5432 Vulnerability in npm package mqtt-packet

Severity

Critical

Classification

CWE-434 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory