A vulnerability, which was classified as critical, was found in gopeak MasterLab up to 3.3.10. Affected is the function base64ImageContent of the file app/ctrl/User.php. The manipulation of the argument image leads to unrestricted upload.

This vulnerability is traded as CVE-2023-7147. It is possible to launch the attack remotely. There is no exploit available.