Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file. NOTE: the product's security model is that users are trusted by the administrator to insert arbitrary content (users cannot create their own accounts through self-registration).
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2023-06-16T00:00:00
Updated: 2023-12-30T20:54:11.278762
Reserved: 2023-06-07T00:00:00
Link: CVE-2023-34845
JSON object: View
NVD Information
Status : Modified
Published: 2023-06-16T04:15:14.143
Modified: 2024-05-17T02:25:14.380
Link: CVE-2023-34845
JSON object: View
Redhat Information
No data.
CWE