PT-2022-13197
CVE-2022-0472
·
تاريخ النشر
2022-02-04
·
تاريخ التحديث
2022-02-10
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
jsdecena/laracom versions prior to 2.0.9
Description
The issue concerns an unrestricted upload of files with dangerous types. This could potentially allow attackers to upload malicious files, posing a security risk.
Recommendations
For versions prior to 2.0.9, update to version 2.0.9 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to only allow safe file types until the update can be applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾