CVE-2025-67077
File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile action.
Published: 2026-01-15 · CVSS: 8.8 · CVSS 3.1
File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile action.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7