CVE-2018-9206

CriticalCVSS 9.8

Published: 11/10/2018(UTC)Updated: 12/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

97.11%

100th percentile - higher than 100% of all known CVEs

Summary

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload up to version 9.22.0. An attacker can upload malicious files without authentication.

Risk Assessment

Potential for remote code execution or hosting malware on the server, leading to full system compromise.

Recommendation

Update Blueimp jQuery-File-Upload to the latest patched version.

Original NVD description (English source)

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0