CVE-2023-7159 | gopeak MasterLab up to 3.3.10 app/ctrl/admin/User.php add/update avatar unrestricted upload

A vulnerability was found in gopeak MasterLab up to 3.3.10. It has been declared as critical. Affected by this vulnerability is the function add/update of the file app/ctrl/admin/User.php. The manipulation of the argument avatar leads to unrestricted upload.

This vulnerability is known as CVE-2023-7159. The attack can be launched remotely. Furthermore, there is an exploit available.