CyberSecBulletin

PrivateUploader vulnerabilities

We track 1 vulnerability in PrivateUploader products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 14, 2023.

1vulnerabilities
0critical
1high
0exploited
8.3average CVSS score

Latest PrivateUploader vulnerabilities

  • 8.3 High severity

    PrivateUploader: Improper Authentication

    CVE-2023-40020PrivateUploader

    PrivateUploader is an open source image hosting server written in Vue and TypeScript. In affected versions `app/routes/v3/admin.controller.ts` did not correctly verify whether the user was an administrator (High Level) or moderator (Low Level) causing the requ