Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-14067
9.8
CRITICALCVSS v3
Published
June 15, 2020
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The install_from_hash functionality in Navigate CMS 2.9 does not consider the .phtml extension when examining files within a ZIP archive that may contain PHP code, in check_upload in lib/packages/extensions/extension.class.php and lib/packages/themes/theme.class.php.
NavigateCMS/Navigate-CMS
GitHubNavigate CMS, a very powerful open source content management system for everybody.
GitHubNavigate CMS, a very powerful open source content management system for everybody.= 2.9NVD