Description
This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server.
* Improper Limitation of a Pathname to a Restricted Directory: A vulnerability exists in the asset upload functionality that allows users to upload files to directories outside of the intended temporary directory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mautic | mautic/core | < 5.2.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | mautic/core | < 5.2.3 | 5.2.3 | GHSA-4w2w-36vm-c8hf |