28Ara
CVE-2023-7159 | gopeak MasterLab up to 3.3.10 app/ctrl/admin/User.php add/update avatar unrestricted upload
A vulnerability was found in gopeak MasterLab up to 3.3.10. It has been declared as critical. Affected by this vulnerability is the functionadd/update
of the file app/ctrl/admin/User.php. The manipulation of the argument avatar leads to unrestricted upload.
This vulnerability is known as CVE-2023-7159. The attack can be launched remotely. Furthermore, there is an exploit available.