Skip to content
OpenAdvisories

Vendor

spbu-se

1 known vulnerabilities.

Products

spbu_se_site 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2024-23826

    Uploading an image with a specific filename causes a server-side DoS

    spbu_se_site is the website of the Department of System Programming of St. Petersburg State University. Before 2024.01.29, when uploading an avatar image, an authenticated user may intentionally use a large Unicode filename which would lead to a server-side d…

    spbu-se spbu_se_site