Blueimp jQuery-File-Upload v9.22.0 - Unrestricted File Upload
Blueimp jQuery-File-Upload v9.22.0 contains an unauthenticated arbitrary file upload caused by insufficient validation in the upload component, letting remote attackers upload malicious files, exploit requires no authentication. References: https://www.exploit-db.com/exploits/45790 https://www.exploit-db.com/exploits/46182/ https://github.com/blueimp/jQuery-File-Upload/pull/3514 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/jquery_file_upload.rb Remediation: Update to the latest version of Blueimp jQuery-File-Upload.
Used 2.5k times · domain, subdomain, ipv4