Security Advisory

CVE-2020-11807

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-05-19 16:00:50

Last updated 2024-08-04 11:42:00

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7 allows an authenticated user to execute arbitrary PHP code (and sometimes terminal commands) on a server by making an avatar update and then visiting the avatar file under the /images/ path.

← Browse all CVEs View on cve.org ↗