Workflow

PyPi: Tendenci

PVE-2021-38274

Safety vulnerability ID: 38274

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Apr 14, 2021 Updated at Mar 30, 2024

Advisory

Tendenci 12.0.5 removes .doc and .xls from the allowed file upload extensions for securit…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

tendenci

Latest version: 15.0

Tendenci - The Open Source Association Management System (AMS)

Affected versions

Fixed versions

Vulnerability changelog

* Removed .doc and .xls from the allowed file upload extensions for the security reason. …

[This text has been limited. Please create a free account to view the full text.]

Resources