-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| blueimp/jquery-file-upload | composer | = 6.4.4 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the file upload handler in UploadHandler.php failing to enforce proper file type validation. Multiple exploit references and the CWE-434 classification confirm this is an unrestricted file upload issue. The critical file path (server/php/UploadHandler.php) is explicitly mentioned in vulnerability descriptions, and the attack vector involves direct upload/execution of PHP files via this component. While the exact function name isn't explicitly stated in advisories, 'handleFileUpload' is the standard entry point for file processing in jQuery File Upload's architecture, making it the most likely vulnerable function.