Vulnerabilidades de apostrophecms uploadfs (CVE)

Registros CVE publicados para apostrophecms uploadfs, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

5.6Media

CVE-2026-113652 hace 22 días

ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

apostrophecms apostrophe; apostrophecms uploadfs

ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leaks account-level SAS token into every public attachment URL. When uploadfs is configured with the Azure backend and sas: true, createContain…

3.3Baja

CVE-2026-113651 hace 22 días

ApostropheCMS: Path traversal in uploadfs

apostrophecms apostrophe; apostrophecms uploadfs

ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library. Prior to uploadfs 1.28.0, attacker-controlled paths that reach the local backend can contain parent-directory segments that escape the configured uplo…