CVE-2018-9206

npm/blueimp-file-upload CVE-2018-9206: critical 9.8

Unrestricted Upload of File with Dangerous Type in blueimp-file-upload

Action: Upgrade blueimp-file-upload to 9.22.1 or later.

npm i blueimp-file-upload@9.22.1

Affected

Fixed versions

Sources

• osv: GHSA-4cj8-g9cp-v5wr
• https://nvd.nist.gov/vuln/detail/CVE-2018-9206
• https://github.com/advisories/GHSA-4cj8-g9cp-v5wr
• https://wpvulndb.com/vulnerabilities/9136
• https://www.exploit-db.com/exploits/45790
• https://www.exploit-db.com/exploits/46182
• https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
• http://www.securityfocus.com/bid/105679
• http://www.securityfocus.com/bid/106629
• http://www.vapidlabs.com/advisory.php?v=204

CVE-2018-9206 · published 2018-10-22T18:53:56Z · modified 2023-11-08T04:00:30.247732Z · JSON