CVE-2018-9205 Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.
HighCVSS 7.5
EPSS 55.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| drupal avatar uploader | = 7.x-1.0-beta8 | No fix listed |
| Robbin Zhao avatar_uploader | < 7.x-1.0-beta8 | 7.x-1.0-beta8 |
References
- www.vapidlabs.com exploit third-party-advisory
- www.drupal.org release-notes vendor-advisory
- www.drupal.org vendor-advisory
- 44501 exploit third-party-advisory vdb-entry