Yugorin

**Name of the Vulnerable Software and Affected Versions** JoomGallery versions prior to 4.4.2 **Description** An unauthenticated arbitrary file upload issue exists via the TUS endpoint. While the endpoint allows files to be uploaded, the attacker cannot control the file name or extension. Achieving code execution through this flaw requires a non-standard server configuration. **Recommendations** Update JoomGallery to version 4.4.2 or later. Restrict access to the TUS endpoint to minimize the risk of exploitation.