CVE-2021-3745

flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type

Score

CVSS 3.0 8.0 High

Status

Modified - security@huntr.dev

Published

2021-10-28

Last modified

2024-08-03

Weaknesses

CWE-434

Affected products

• Flatcore-cms (Flatcore)
• Flatcoreflatcore-cms (Flatcore)

References

• https://github.com/flatcore/flatcore-cms/commit/5cc3937b6bc38293ec921a5cf00018b48b668dc6
• https://huntr.dev/bounties/7879ab3d-8018-402a-aa0b-131bdbd1966c