Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2021-25971

Camaleon CMS - SVG File Upload Creates DoS for Media Upload Feature

Description

In Camaleon CMS, versions 2.0.1 to 2.6.0 are vulnerable to an Uncaught Exception. The app's media upload feature crashes permanently when an attacker with a low privileged access uploads a specially crafted .svg file

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

camaleon_cms camaleon_cms

  • 2.0.1 to < unspecifiedaffected
  • unspecified to ≤ 2.6.0affected

References