Summary
It was discovered that Collabtive did not properly validate avatar image
file uploads. An authenticated user could exploit this with a crafted file
to cause Collabtive to execute arbitrary code. (CVE-2015-0258)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | collabtive | 2.0+dfsg-6ubuntu1.1 |
Vulnerabilities 1
-
Unscored —
Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before…
References
-
report
https://ubuntu.com/security/CVE-2015-0258