Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0
Critical CVSS 9.8
Summary
Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- http://www.securityfocus.com/bid/105679 Third Party Advisory
- http://www.securityfocus.com/bid/106629 Third Party Advisory
- http://www.vapidlabs.com/advisory.php?v=204 Exploit
- https://wpvulndb.com/vulnerabilities/9136 Exploit
- https://www.exploit-db.com/exploits/45790/ Exploit
- https://www.exploit-db.com/exploits/46182/ Exploit
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Patch
- http://www.securityfocus.com/bid/105679 Third Party Advisory
- http://www.securityfocus.com/bid/106629 Third Party Advisory
- http://www.vapidlabs.com/advisory.php?v=204 Exploit
- https://github.com/psolom/RichFilemanager/issues/354
- https://github.com/psolom/RichFilemanager/issues/412
- https://wpvulndb.com/vulnerabilities/9136 Exploit
- https://www.exploit-db.com/exploits/45790/ Exploit
- https://www.exploit-db.com/exploits/46182/ Exploit
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html Patch
Timeline
- nvd_ingest NVD