Description
Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-picture.
Unscored
CVE-2020-18190
EUVD-2020-10117GHSA-p836-3j4x-6q4q
Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-pictur…
Published Oct 2, 2020 · Updated Aug 4, 2024 · Assigned by mitre