CVE-2023-29770 (published 2023-11-27T00:00:00)
In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filtering.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a