CVE-2023-29770

In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filtering

published November 27, 2023

CVSS
—
EPSS
1%
Percentile
59.5
In the wild
Unconfirmed
What it is

In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filtering.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00906 · 59.5th percentile
Published
2023-11-27T00:00Z
EPSS history
Timeline
  • 27 NOV 00:00Z
    In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filtering
    cvelistv5