Exploitation ongoing with high activity in latest observed window (3 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
Cytellite recent detection targeting CVE-2018-9205 — Association Gitoyen Visit -- https://cti.loginsoft.com/ip/80.67.172.162 #Loginsoft #Cytellite #Cybersecurity #CVE20189205 #LOVI #ThreatIntelligence #Infosecurity #AI https://t.co/YccIOVVv9j
Post summary
Cytellite reports recent detection of traffic targeting CVE‑2018‑9205, implying that the vulnerability is being actively exploited.
Cytellite recent detection targeting CVE-2018-9205 — Association Gitoyen Visit -- https://cti.loginsoft.com/ip/80.67.172.162 #Loginsoft #Cytellite #Cybersecurity #CVE20189205 #LOVI #ThreatIntelligence #Infosecurity #AI https://t.co/xklv2Dp31E
Post summary
The tweet reports that CVE‑2018‑9205 is currently being targeted by attackers, indicating ongoing exploitation, but provides no technical or mitigation details.
Cytellite recent detection targeting CVE-2018-9205 — Association Gitoyen Visit -- https://cti.loginsoft.com/ip/80.67.172.162 #Loginsoft #Cytellite #Cybersecurity #CVE20189205 #LOVI #ThreatIntelligence #Infosecurity #AI https://t.co/yEfQbn5nlU
Post summary
Cytellite reports a detection event targeting CVE‑2018‑9205, but no further technical or exploitation details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | drupal | avatar_uploader | 7.x-1.0 | - | - |