CVE-2026-65650

Summary

Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.

Affected Software

Weaknesses

• CWE-770: CWE-770 Allocation of Resources Without Limits or Throttling

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/Elgg/Elgg/compare/7.0.0-rc.1…7.0.0
• https://github.com/Elgg/Elgg/commit/ab91d59dc2caaa3fdbfe7e9b916fc0cc7e6b323a
• https://github.com/Elgg/Elgg/pull/15041

• ←Previous
• Next→