CVE-2019-12150

Name of the Vulnerable Software and Affected Versions Karamasoft UltimateEditor version 1

Description The issue allows an attacker to upload files without restrictions on file types or extensions. The upload can be performed using the Attach icon. Once uploaded, the files are accessible under the UltimateEditorInclude/UserFiles/ URI.

Recommendations For Karamasoft UltimateEditor version 1, restrict access to the Attach icon to prevent unauthorized file uploads, and consider implementing file type and extension restrictions to minimize the risk of exploitation.