📦 Loris

LORIS versions before 26.0.5, 27.0.2, and 28.0.0 contain a path traversal vulnerability in the media module that allows authenticated users with sufficient privileges to upload malicious files to arbi...