A Discourse image upload exploit allowed basic users to read server files by chaining a JPEG processing delay, Ghostscript execution, and ImageMagick features. The research also exposed a separate cache poisoning flaw that could run JavaScript for anonymous visitors. Researchers reported both issues in June 2026 and patched them before publication. The technical report from […]
This article has been indexed from Cyber Security News
Read the original article: