CVE-2018-9206

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

Score

CVSS 3.1 9.8 Critical

Status

Modified - larry0@me.com

Published

2018-10-11

Last modified

2026-08-12

Weaknesses

CWE-434

Affected products

• Blueimp Jquery-file-upload (Blueimp)
• Jquery File Upload (Jquery File Upload Project)

References

• http://www.securityfocus.com/bid/105679
• http://www.securityfocus.com/bid/106629
• http://www.vapidlabs.com/advisory.php?v=204
• https://wpvulndb.com/vulnerabilities/9136
• https://www.exploit-db.com/exploits/45790/
• https://www.exploit-db.com/exploits/46182/
• https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
• https://github.com/psolom/RichFilemanager/issues/354
• https://github.com/psolom/RichFilemanager/issues/412