File upload access bypass
High
Example incident
- Status
- Patch available
- Affected
- Example CMS 5.0
- Fixed in
- 5.0.2
Summary
An unauthenticated upload endpoint writes files into the public media directory.
Updates
-
8h ago
Fixed release published
Incident brief
File upload access bypass
High · Patch available
Affected: Example CMS 5.0
Fixed in: 5.0.2
An unauthenticated upload endpoint writes files into the public media directory.
What to do:
- Upgrade Example CMS to 5.0.2.
- Review files added to the media directory today.
Sources:
- CMS advisory https://example.com/upload-bypass