GitHub Advisoryadvisory · Packagist

GHSA-v6f4-jwv9-682w class.upload.php allows cross-site scripting attacks via uploaded files

MEDIUM Published 2024-01-04 Modified 2024-01-04 Official page ↗
Aliases
CVE-2023-6551
Ecosystem
Packagist
Packages
verot/class.upload.php
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-20, CWE-434
Reviewed
2024-01-04

Affected packages

• Packagist verot/class.upload.php: <= 2.1.6 (no fix yet)

Description

As a simple library, class.upload.php does not perform an in-depth check on uploaded files, allowing a stored XSS vulnerability when the default configuration is used. Developers must be aware of that fact and use extension whitelisting accompanied by forcing the server to always provide content-type based on the file extension. The README has been updated to include these guidelines.

Related

Alias · CVE (1)

  • CVE-2023-6551 As a simple library, class.upload.php does not perform an in-depth check on uploaded files, allowing a stored XSS vulnerability when the… vulnerability

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References