Description
Joomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.2 - The TUS endpoint allows arbitrary file uploads, however neither file name nor file extension are under attacker control. Code execution requires non-standard server configuration.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| joomgalleryfriends.net | JoomGallery extension for Joomla | 4.0.0-4.4.1 | — |