Critical security vulnerability in Flow and Neos
The Neos team has issued a warning about a critical security vulnerability in Flow and Neos, which, under certain conditions, allows attackers to upload arbitrary files to the server and potentially execute the uploaded code.
It affects all Flow versions released in recent years and, consequently, all Neos versions built on a vulnerable Flow version.
Karsten Dambekalns