Skip to content

Product

oneup/uploader-bundle vulnerabilities

1 published CVE affecting oneup/uploader-bundle, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest oneup/uploader-bundle CVEs

Newest publication first

  1. CVE-2020-5237 Relative Path Traversal in oneup/uploader-bundle

    Published
    HighCVSS 8.8 EPSS 3.9% PoC

    Multiple relative path traversal vulnerabilities in the oneup/uploader-bundle before 1.9.3 and 2.1.5 allow remote attackers to upload, copy, and modify files on the filesystem (potentially leading to arbitrary code execution) via the (1) filename parameter to BlueimpController.ph...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.