CVE-2020-36141

2021-06-0416:15:08

Google

osv.dev

bloofoxcms

unrestricted file upload

mime type validation

AI Score

Confidence

High

EPSS

0.001

Percentile

42.0%

JSON

BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting ‘image/jpeg’ within the ‘Content-Type’ header.

References

muteb.io/2020/12/29/BloofoxCMS-Multiple-Vulnerabilities.html