Cpe:2.3:a:hubzero:hubzero_cms:*:*:*:*:*:*:*:*

Authenticated users can exploit a path traversal vulnerability in HUBzero CMS project file upload handlers to achieve arbitrary file writes, potentially leading to remote code execution.