Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-9053

Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website with a malicious default file path, and then conceal this form

Description

Mothra would respect a default value given by a website for HTML file upload forms. An attacker could craft a website with a malicious default file path, and then conceal this form element.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

9front 9front

Default version status: unaffected

  • f04e113279274526a8dae34de373027b68921fbf to < d145acc9ef0da47131af6ad94e87264e04870d47affected

References