We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Improper input validation in /admin/config/save in User-friendly SVN (USVN) before v1.0.12 and below allows administrators to execute arbitrary code via the fields "siteTitle", "siteIco" and "siteLogo".
Reserved 2024-06-10 | Published 2024-09-20 | Updated 2024-11-01 | Assigner mitregithub.com/usvn/usvn/commit/6b4678954fca9635154743b95ff9c8947cf5f46f
github.com/usvn/usvn/releases/tag/1.0.12
www.usvn.info/2024/06/09/usvn-1.0.12
Support options