Insecure file upload In modx/revolution
Description
Unrestricted Upload of File with Dangerous Type in MODX Revolution MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting can be changed by an administrator.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version |
|---|---|---|
 packagist |
Aliases
1. 2. 3. 4.
References
1. 2. 3.