critical9.8
CVE-2022-27260
Unrestricted Upload of File with Dangerous Type in ButterCMS
Impact
An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a crafted SVG file.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | buttercms | <= 1.2.8 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Buttercms | Buttercms | Version 1.2.8 |