Eziosuite · Eziosuite · CVE-2022-26605
**Name of the Vulnerable Software and Affected Versions**
eZiosuite version 2.0.7
**Description**
The issue concerns an authenticated arbitrary file upload via the Avatar upload functionality.
**Recommendations**
For eZiosuite version 2.0.7, consider disabling the Avatar upload functionality until a patch is available to prevent exploitation. Restrict access to the upload feature to minimize the risk of arbitrary file uploads.