Skip to content
Threat Feed

Product

Mediapool Addon

1 brief RSS
high threat

Redaxo CMS Mediapool Addon Arbitrary File Upload Vulnerability (CVE-2018-25353)

Redaxo CMS Mediapool Addon version 5.5.1 and older contains an arbitrary file upload vulnerability (CVE-2018-25353) that allows authenticated users to bypass file extension blacklist restrictions, leading to arbitrary code execution.

Mediapool Addon file-upload web-application code-execution
2r 1t 1c