high8.8
CVE-2022-26605
eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality.
Impact
eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dascomsoft | Eziosuite | Version 2.0.7 |