← All advisories

Critical severity9.8NVD Advisory· Published Oct 11, 2018· Updated Aug 12, 2026

CVE-2018-9206

CVE-2018-9206

Description

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
blueimp-file-uploadnpm	< 9.22.1	9.22.1

Affected products

3

Jquery File Upload Project/Jquery File Upload
cpe:2.3:a:jquery_file_upload_project:jquery_file_upload:*:*:*:*:*:*:*:*
Range: <=9.22.0
ghsa-coords
pkg:npm/blueimp-file-upload
Range: < 9.22.1
Blueimp/Blueimp Jquery File Uploadv5
Range: unspecified

Patches

Vulnerability mechanics

References

13

www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.htmlnvdPatchThird Party AdvisoryWEB
www.vapidlabs.com/advisory.phpnvdExploitThird Party AdvisoryWEB
wpvulndb.com/vulnerabilities/9136nvdExploitThird Party AdvisoryWEB
www.exploit-db.com/exploits/45790/nvdExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/46182/nvdExploitThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/105679nvdThird Party AdvisoryVDB EntryWEB
www.securityfocus.com/bid/106629nvdThird Party AdvisoryVDB EntryWEB
github.com/advisories/GHSA-4cj8-g9cp-v5wrghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-9206ghsaADVISORY
www.exploit-db.com/exploits/45790ghsaWEB
www.exploit-db.com/exploits/46182ghsaWEB
github.com/psolom/RichFilemanager/issues/354nvd
github.com/psolom/RichFilemanager/issues/412nvd

News mentions

0

No linked articles in our index yet.