apostrophecms uploadfs vulnerabilities
2 published CVEs name apostrophecms uploadfs among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-113652
ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)
apostrophecms · apostrophe
Medium5.6 - CVE-2026-113651
ApostropheCMS: Path traversal in uploadfs
apostrophecms · apostrophe
Low3.3