edu-sharing vulnerabilities
1 known vulnerability in edu-sharing from metaVentis. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest first
- 7.4 High severity
edu-sharing: Unrestricted Upload of File with Dangerous Type
An authenticated user can upload arbitrary files in the upload function for collection preview images. An attacker may upload an HTML file that includes malicious JavaScript code which will be executed if a user visits the direct URL of the collection preview