Skip to content
OpenAdvisories

Vendor

Capgo

83 known vulnerabilities.

Products

41 results · Clear filters · Feed

  • Medium 4.3

    Capgo < 12.128.2 - Orphaned File Retention via Profile Image Replacement

    Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files through previously generated URLs, allowing unauthorized retrieval of user-uploaded cont…