critical9.8
CVE-2023-51803
LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "<?php ?>" substring.
Impact
LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "<?php ?>" substring.
Affected products
| Product | Affected versions |
|---|---|
| LinuxServer.Io Heimdall | before 2.5.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/linuxserver/Heimdall/pull/1167
- https://github.com/linuxserver/Heimdall/pull/1173
- https://github.com/linuxserver/Heimdall/releases/tag/v2.5.7
- https://github.com/linuxserver/Heimdall/pull/1167
- https://github.com/linuxserver/Heimdall/pull/1173
- https://github.com/linuxserver/Heimdall/releases/tag/v2.5.7