logo

Database

Insecure file upload In jquery-file-upload

Description

Unrestricted Upload of File with Dangerous Type in jquery-file-upload Arbitrary file upload in jQuery Upload File <= 4.0.2

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2018-92072. NVD-2018-92073. OSV-2018-92074. GHSA-mxr5-p36v-479m5. GCVE-2018-9207

References

1. http://www.vapidlabs.com/advisory.php?v=2062. https://github.com/cved-sources/cve-2018-9207

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.