Description
funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | funadmin/funadmin | >= 3.3.2, <= 3.3.3 | — | GHSA-5m3m-q8cq-77g4 |
Critical · 9.8
CVE-2023-36097
EUVD-2023-1705GHSA-5m3m-q8cq-77g4
fuadmin vulnerable to insecure file upload
Published Jun 22, 2023 · Updated Dec 2, 2024 · Assigned by mitre