Critical severity9.8NVD Advisory· Published Aug 3, 2021· Updated Jun 17, 2026
CVE-2020-19302
CVE-2020-19302
Description
An arbitrary file upload vulnerability in the avatar upload function of vaeThink v1.0.1 allows attackers to open a webshell via changing uploaded file suffixes to ".php".
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- vaeThink/vaeThinkdescription
Patches
Vulnerability mechanics
References
1- github.com/tingyuu/vaeThink/issues/2nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.