Piccolo Admin
Approved changes feed: RSS · Atom
cpe:2.3:a:piccolo-orm:piccolo_admin:1.2.0:*:*:*:*:*:*:*
part: a version: 1.2.0 update: *
| Vendor | Piccolo Orm (bf28f6f6-cd49-5bcd-8d1d-30eb89ca47f2) |
|---|---|
| Product | Piccolo Admin (6132960a-0fe4-52bc-8209-3b05c342ae78) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-30248 |
vulnerable | 2026-06-08 06:35:29.325101 |
Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page
HIGH (7.7)
Piccolo Admin is an admin interface/content management system for Python, built on top of Piccolo. Piccolo's admin panel allows media files to be uploaded. As a default, SVG is an allowed file type for upload. An attacker can upload an SVG which when loaded can allow arbitrary access to the admin page. This vulnerability was patched in version 1.3.2.
Published: 2024-04-02T14:55:17.483Z
Updated: 2024-08-02T01:32:05.414Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.