critical9.8
CVE-2020-18704
Unrestricted Upload of File with Dangerous Type in django-widgy
Impact
Unrestricted Upload of File with Dangerous Type in Django-Widgy v0.8.4 allows remote attackers to execute arbitrary code via the 'image' widget in the component 'Change Widgy Page'.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | django-widgy | < 0.9.0 | 0.9.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fusionbox | Widgy | Version 0.8.4 |