CVE-2019-1010123

2019-07-2313:15:12

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.0%

JSON

MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: Creating file with custom a filename and content. The component is: Filtering user parameters before passing them into phpthumb class. The attack vector is: web request via /assets/components/gallery/connector.php.

CPENameOperatorVersion
revolutioneq2.2.13-pl
revolutioneq2.1.4-pl
revolutioneq2.2.8-pl
revolutioneq2.2.0-rc1
revolutioneq2.1.0-rc2
revolutioneq2.1.0-pl
revolutioneq2.0.4-pl2
revolutioneq2.3.3-pl
revolutioneq2.0.6-pl2
revolutioneq2.4.4-pl

Name	Operator	Version
revolution	eq	2.2.13-pl
revolution	eq	2.1.4-pl
revolution	eq	2.2.8-pl
revolution	eq	2.2.0-rc1
revolution	eq	2.1.0-rc2
revolution	eq	2.1.0-pl
revolution	eq	2.0.4-pl2
revolution	eq	2.3.3-pl
revolution	eq	2.0.6-pl2
revolution	eq	2.4.4-pl