Description
Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.
Recommended action
Apply updates per vendor instructions.
CISA remediation due date for U.S. federal agencies: 1 Feb 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.