Description
REDAXO is a PHP-based CMS. In Redaxo before 5.18.3, the mediapool/media page is vulnerable to arbitrary file upload. This vulnerability is fixed in 5.18.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| redaxo | redaxo | < 5.18.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | redaxo/source | < 5.18.3 | 5.18.3 | GHSA-wppf-gqj5-fc4f |