CVE-2023-7147 | gopeak MasterLab up to 3.3.10 app/ctrl/User.php base64ImageContent image unrestricted upload

A vulnerability, which was classified as critical, was found in gopeak MasterLab up to 3.3.10. Affected is the function base64ImageContent of the file app/ctrl/User.php. The manipulation of the argument image leads to unrestricted upload.

This vulnerability is traded as CVE-2023-7147. It is possible to launch the attack remotely. There is no exploit available.