Unscored CVE-2017-1002024 EUVD-2017-1639GHSA-q932-hr86-c9wg

Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to up…

Published Sep 14, 2017 · Updated Sep 17, 2024 · Assigned by larry_cashdollar

Vendor: Kind Editor Product: Kind Editor

Description

Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to upload files.

Affected products

Vendor	Product	Affected	Fixed
Kind Editor	Kind Editor	unspecified – < 4.1.12	4.1.12

References

https://github.com/kindsoft/kindeditor
http://www.vapidlabs.com/advisory.php?v=195
http://kindeditor.org