Threats tagged 'ghsa-2hch-3q25-w3g9'

Eladmin versions up to 2.7 have a missing authorization vulnerability in the LocalStorageController uploadPicture handler. This flaw allows low-privileged authenticated users to bypass the storage:add permission. Exploitation involves sending POST requests with image-named files to the /api/localStorage/pictures endpoint, enabling unauthorized file writes to the server's local storage and disclosure of absolute server paths. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity.