Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:kirby:cms:*:*:*:*:*:*:*:*

1 brief RSS
high threat

Missing Authorization in Kirby CMS REST API Chunked Upload Handler

Authenticated users without file upload permissions can exploit a missing authorization check in Kirby CMS to exhaust server storage via incomplete chunked file uploads, leading to denial-of-service.

exploited Kirby CMS +1 web-application denial-of-service api-security web-application-vulnerability path-traversal cms
1r 1t 1c