Skip to content
OpenAdvisories

Vendor

HytaleModding

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.7

    Hytale Modding Vulnerable to Remote Code Execution via File Upload Bypass in `FileController`

    The Hytale Modding Wiki is a free service for Hytale mods to host their documentation & wikis. In version 1.2.0 and prior, the quickUpload() endpoint validates uploaded files by checking their MIME type (via PHP's finfo, which inspects file contents) but cons…