Remote Code Execution Vulnerability in Bludit by Bludit Team
CVE-2019-12548

8.8HIGH

Key Information:

Vendor: Bludit
Status: Bludit
Vendor: CVE Published:; 3 June 2019

What is CVE-2019-12548?

A security flaw in Bludit prior to version 3.9.0 permits authenticated users to execute arbitrary PHP code remotely. This occurs through a vulnerability that allows the upload of PHP files when changing the logo via the admin interface at /admin/ajax/upload-logo. Exploiting this vulnerability could enable malicious actors to gain control of the affected system, potentially compromising sensitive data and operations.