CVE-2020-36141

2021-06-0415:03:38

mitre

www.cve.org

bloofoxcms mime type upload

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

42.0%

JSON

BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting ‘image/jpeg’ within the ‘Content-Type’ header.

References

muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.html