Skip to content
Threat Feed
Subscribe

Product

Kirby CMS (>= 5.0.0, < 5.5.2)

1 brief RSS
high threat

Missing Authorization in Kirby CMS REST API Chunked Upload Handler

Authenticated users without file upload permissions can exploit a missing authorization check in Kirby CMS to exhaust server storage via incomplete chunked file uploads, leading to denial-of-service.

exploited Kirby CMS +1 web-application denial-of-service api-security web-application-vulnerability path-traversal cms
1r 1t 1c