Security Advisory

CVE-2020-18190

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-10-02 13:12:51

Last updated 2024-08-04 14:00:49

Assigner mitre

CVSS score not scored

State PUBLISHED

Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-picture.