apostrophecms uploadfs Schwachstellen (CVE)

Für apostrophecms uploadfs veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

5.6Mittel

CVE-2026-113652 vor 22 Tagen

ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

apostrophecms apostrophe; apostrophecms uploadfs

ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leaks account-level SAS token into every public attachment URL. When uploadfs is configured with the Azure backend and sas: true, createContain…

3.3Niedrig

CVE-2026-113651 vor 22 Tagen

ApostropheCMS: Path traversal in uploadfs

apostrophecms apostrophe; apostrophecms uploadfs

ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library. Prior to uploadfs 1.28.0, attacker-controlled paths that reach the local backend can contain parent-directory segments that escape the configured uplo…