https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T14:44:28.145740+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-221216 EUVD-2026-221216 2026-10-08T14:44:28.147881+00:00 EUVD-2026-221216 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27411 fkie_cve-2025-27411 2026-10-08T14:44:28.147922+00:00

REDAXO is a PHP-based CMS. In Redaxo before 5.18.3, the mediapool/media page is vulnerable to arbitrary file upload. This vulnerability is fixed in 5.18.3.

 https://cve.radiocsirt.org/vuln/ghsa-wppf-gqj5-fc4f GHSA-wppf-gqj5-fc4f — REDAXO allows Arbitrary File Upload in the mediapool page 2026-10-08T14:44:28.147963+00:00

Affected: Packagist: redaxo/source

### Summary An arbitrary file upload vulnerability was identified in the redaxo. This flaw permits users to upload malicious files, which can lead to JavaScript code execution and distribute malware.

### Details On the latest version of Redaxo, v5.18.2, the mediapool/media page is vulnerable to arbitrary file upload.

### PoC 1. Log in to the portal then navigate to `Mediapool`. 2. Upload a png file (ex: poc.png)

![1](https://github.com/user-attachments/assets/e9165434-d2cd-437b-87a3-f9527d4f3070)

3. Intercept the upload HTTP request on burp suite and change `filename: poc.1html`, `Content-Type:image/html` and insert the malicious html code. (ex: `<IFRAME SRC="javascript:alert(1);"></IFRAME>`)

![2](https://github.com/user-attachments/assets/f8da0e6b-e807-46be-a867-dc31b1e13e57)

4. Forward the request.

5. Navigate to the file.

![3](https://github.com/user-attachments/assets/4c44c5cf-8467-452d-b249-cf2d72e0d328) ![4](https://github.com/user-attachments/assets/29db80e3-a5b9-4354-a292-c1ae7189931a)

### Impact Exploiting an arbitrary file upload vulnerability enables attackers to execute malicious code on a server.