Description
An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitrary code via a crafted file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | automad/automad | < 2.0.0-alpha.5 | 2.0.0-alpha.5 | GHSA-47mc-qmh2-mqj4 |