Vulnerabilities

TI-2017-10868 CVE-2017-14840 · GHSA-85xp-pw8p-jjg3

TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.

MEDIUM 44

TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03516 Published 2017-09-27 No fix listed CWE-434

TI-2017-10867 CVE-2017-14839 · GHSA-qrx7-28jj-4c32

MEDIUM 44

TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03516 Published 2017-09-27 No fix listed CWE-434

TI-2017-10866 CVE-2017-14838 · GHSA-j45r-mrwm-9mjx

MEDIUM 44

TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03516 Published 2017-09-27 No fix listed CWE-434