# File upload access bypass

File upload access bypass
High · Patch available
Affected: Example CMS 5.0
Fixed in: 5.0.2

An unauthenticated upload endpoint writes files into the public media directory.

What to do:
- Upgrade Example CMS to 5.0.2.
- Review files added to the media directory today.

Sources:
- CMS advisory https://example.com/upload-bypass

Canonical page: https://www.incidentping.com/incidents/file-upload-bypass