Skip to content
OpenAdvisories

Vendor

owen2345

18 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-102261 Public exploit

    owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization

    A flaw has been found in owen2345 Camaleon CMS up to 2.9.2. Impacted is the function crop of the file app/controllers/camaleon_cms/admin/media_controller.rb of the component Media Crop Handler. This manipulation of the argument saved_avatar causes authorizati…