Description (CNA)
Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Elgg / Elgg | affected 0 before 6.3.5; affected 7.0.0-rc.1 before 7.0.0 |
CWE
CWE-770
References
- https://github.com/Elgg/Elgg/compare/7.0.0-rc.1...7.0.0
- https://github.com/Elgg/Elgg/commit/ab91d59dc2caaa3fdbfe7e9b916fc0cc7e6b323a
- https://github.com/Elgg/Elgg/pull/15041
ADP enrichment
No English description supplied.
No references supplied.