CVE-2024-23790 — Missing file type check in avatar picture upload
Improper Input Validation vulnerability in the upload functionality for user avatars allows functionality misuse due to missing check of filetypes. This issue affects OTRS: fro…
Published: 2024-01-29 · CVSS: 3.5 · CVSS 3.1
Improper Input Validation vulnerability in the upload functionality for user avatars allows functionality misuse due to missing check of filetypes. This issue affects OTRS: from 7.0.X through 7.0.48, from 8.0.X through 8.0.37, from 2023 through 2023.1.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7