High · published December 4, 2025
🚨 Unrestricted file uploads in RomM could let attackers serve up rogue admin accounts with just a deceptive SVG file! ⚡ Think of it like a restaurant allowing anyone to hand in a menu item with no checks — a sneaky diner could submit a dish that poisons the whole kitchen. Here, the malicious SVG or HTML files are the toxic recipes, running JavaScript when accessed! This means an attacker could easily create a rogue admin account, taking over the entire system! They could escalate their privileges, manipulate user data, and wreak havoc across your game collection management. The potential for chaos here is absolutely devastating!
Think of it like a restaurant allowing anyone to hand in a menu item with no checks — a sneaky diner could submit a dish that poisons the whole kitchen. Here, the malicious SVG or HTML files are the toxic recipes, running JavaScript when accessed! RomM has multiple unrestricted file upload vulnerabilities that let authenticated users upload malicious SVG or HTML files. When these files are accessed, they execute embedded JavaScript, leading to stored XSS, which, when coupled with a CSRF misconfiguration, can result in full administrative account takeover.
This means an attacker could easily create a rogue admin account, taking over the entire system! They could escalate their privileges, manipulate user data, and wreak havoc across your game collection management. The potential for chaos here is absolutely devastating! To secure your system, patch immediately to version 4.4.1 or 4.4.1-beta.2. Additionally, implement strict file type validations to prevent such uploads and review your CSRF configurations to ensure they are properly set up. You've got this! With these steps, you'll be one step closer to securing your game management system! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| romm.app/romm | < 4.4.1 | 4.4.1 |
| romm.app/romm | all versions | — |