CVE-2021-36440

Unrestricted Upload of File with Dangerous Type in packagist/showdoc/showdoc

Identifiers

CVE-2021-36440

Package Slug

packagist/showdoc/showdoc

Vulnerability

Unrestricted Upload of File with Dangerous Type

Description

Unrestricted File Upload allows remote attackers to execute arbitrary code via the 'file_url' parameter.

Affected Versions

Version 2.9.5

Solution

Upgrade to version 2.9.6 or above.

Last Modified

2021-09-16

source