Description
In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload.
Critical · 9.8
CVE-2023-26968
EUVD-2023-30758GHSA-9g5p-c7vc-45f7
In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload.
Published Mar 29, 2023 · Updated Feb 18, 2025 · Assigned by mitre