PT-2024-10975 · Oxwall · Oxwall
Published
2024-05-01
·
Updated
2024-05-02
·
CVE-2021-36593
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Oxwall version 1.8.7
Description
The issue allows for unauthenticated file upload, enabling an attacker to upload image files due to incorrect access control.
Recommendations
For Oxwall version 1.8.7, restrict access to file upload functionality to prevent unauthenticated uploads until a fix is available.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Oxwall