CVE-2021-25971

Published October 20th, 2021

View on NVD ↗

CVSS v3

4.3

MEDIUM

CVSS v2

MEDIUM

Affected

PROJECT

Description

In Camaleon CMS, versions 2.0.1 to 2.6.0 are vulnerable to an Uncaught Exception. The app's media upload feature crashes permanently when an attacker with a low privileged access uploads a specially crafted .svg file

owen2345/camaleon-cms

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails

GitHub

1.24K