tocsin

Debian/ocsinventory-server: high 8.8

Unrestricted file upload (with remote code execution) in require/mail/NotificationMail.php in Webconsole in OCS Inventory NG OCS Inventory Server through 2.5 allows a privileged user to gain access to

Action: Upgrade ocsinventory-server to 2.8+dfsg1-1 or later.

Affected

introducedfixedlast affected
02.8+dfsg1-1-

Fixed versions

2.8+dfsg1-1

Sources

published · modified · JSON