critical9.8
CVE-2023-26968
In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload.
Impact
In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atrocore | Atrocore | Version 1.5.25 |