This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server. * Improper Limitation of a Pathname to a Restricted Directory: A vulnerability exists in the asset upload functionality that allows users to upload files to directories outside of the intended temporary directory.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| mautic/core(Packagist) | 0 | 5.2.3 | N/A |
CVSS Metrics