Multiple relative path traversal vulnerabilities in the oneup/uploader-bundle before 1.9.3 and 2.1.5 allow remote attackers to upload, copy, and modify files on the filesystem (potentially leading to arbitrary code execu…
CVSS 3.1HIGH 8.8·Network·Low privileges·No interaction·EPSS 0.03929·Published 2020-02-05·Fixed in 1.9.3, 2.1.5CWE-23