VYPR

OneupUploaderBundle

by 1up-lab

Source repositories

CVEs (1)

  • CVE-2020-5237HigFeb 5, 2020
    risk 0.51cvss 8.8epss 0.04

    Multiple relative path traversal vulnerabilities in the oneup/uploader-bundle before 1.9.3 and 2.1.5 allow remote attackers to upload, copy, and modify files on the filesystem (potentially leading to arbitrary code execution) via the (1) filename parameter to…