AU
Product
Avatar Uploader
by Drupal · last CVE Apr 4, 2018
1
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add Avatar Uploader to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-9205
7.5
55%
Apr 4
Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path
Affected: 7.x-1.0
Showing 1