Description
In Camaleon CMS, versions 2.0.1 to 2.6.0 are vulnerable to an Uncaught Exception. The app's media upload feature crashes permanently when an attacker with a low privileged access uploads a specially crafted .svg file
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| camaleon_cms | camaleon_cms | 2.0.1 – < unspecified, unspecified – ≤ 2.6.0 | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | camaleon_cms | >= 2.0.1, < 2.6.0.1 | 2.6.0.1 | GHSA-r2w2-h6r8-3r53 |