Osuuu vulnerabilities
We track 3 vulnerabilities in Osuuu products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 19, 2026.
Latest Osuuu vulnerabilities
- 7.3 High severity
LightPicture: Use of Hard-coded Password
A vulnerability has been found in osuuu LightPicture up to 1.2.2. This issue affects some unknown processing of the file /public/install/lp.sql of the component API Upload Endpoint. Such manipulation of the argument key leads to hard-coded credentials. The att
- 9.8 Critical severity
LightPicture: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in osuuu LightPicture up to 1.2.2. Affected is an unknown function of the file /app/controller/Setup.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely.
- 8.1 High severity
LightPicture: Use of Hard-coded Cryptographic Key
A vulnerability, which was classified as critical, has been found in osuuu LightPicture up to 1.2.2. This issue affects the function handle of the file /app/middleware/TokenVerify.php. The manipulation leads to use of hard-coded cryptographic key . The attack