A vulnerability was found in Cervantes up to 0.5-alpha and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to unrestricted upload.
This vulnerability is handled as CVE-2024-42054. The attack can only be done within the local network. There is no exploit available.
It is recommended to apply a patch to fix this issue.