Skip to content
Threat Feed
Subscribe

Product

Kirby CMS (< 4.9.5, 5.0.0-5.5.1)

1 brief RSS
high threat

Missing Authorization in Kirby CMS REST API Chunked Upload Handler

Authenticated users without file upload permissions can exploit a missing authorization check in Kirby CMS to exhaust server storage via incomplete chunked file uploads, leading to denial-of-service.

exploited Kirby CMS +1 web-application denial-of-service api-security web-application-vulnerability path-traversal cms
1r 1t 1c