ExpressionEngine · Report #841397
Low privileges (auth) Remote Command Execution - PHP file upload bypass.
Validstatus
highseverity
22upvotes
28 May 2024disclosed
Summary
ExpressionEngine was vulnerable to unrestricted file upload via a low-privileged user due to a bypass extension check that led to remote command execution.
Expressionengine was vulnerable to unrestricted file upload with low privileged user due to bypass exteension check led to remote command execution.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.