Description
In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filtering.
Unscored
CVE-2023-29770
EUVD-2023-33308GHSA-rhm3-5ppf-x22h
In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension fi…
Published Nov 27, 2023 · Updated Aug 2, 2024 · Assigned by mitre