CVE-2021-25971 — Camaleon CMS - SVG File Upload Creates DoS for Media Upload Feature

Description (CNA)

In Camaleon CMS, versions 2.0.1 to 2.6.0 are vulnerable to an Uncaught Exception. The app's media upload feature crashes permanently when an attacker with a low privileged access uploads a specially crafted .svg file

Affected (CNA)

Vendor / product	Versions
camaleon_cms / camaleon_cms	affected 2.0.1 before unspecified; affected unspecified through 2.6.0

CWE

CWE-248

References

https://github.com/owen2345/camaleon-cms/commit/ab89584ab32b98a0af3d711e3f508a1d048147d2
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25971

ADP enrichment

CVE

No English description supplied.

https://github.com/owen2345/camaleon-cms/commit/ab89584ab32b98a0af3d711e3f508a1d048147d2
https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25971

CISA-ADP

No English description supplied.

No references supplied.