What is GHSA-3w4q-685g-qf2v?

GHSA-3w4q-685g-qf2v is a security advisory published by GitHub Security Advisories with High severity. freo2 provided by refirio contains an unrestricted upload of file with dangerous type...

Which CVE IDs does GHSA-3w4q-685g-qf2v cover?

GHSA-3w4q-685g-qf2v covers the following CVE IDs: CVE-2026-67243. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3w4q-685g-qf2v?

GHSA-3w4q-685g-qf2v has a CVSS v3 base score of 7.2, published by GitHub Security Advisories.

GHSA-3w4q-685g-qf2vHighCVSS 7.2

freo2 provided by refirio contains an unrestricted upload of file with dangerous type...

Vendor

GitHub Security Advisories

Published

August 4, 2026

Last Modified

August 4, 2026

🔗 CVE IDs covered (1)

CVE-2026-67243 →

📋 Description

freo2 provided by refirio contains an unrestricted upload of file with dangerous type vulnerability. A user with the highest-level administrative privileges for the product may upload an executable file and execute arbitrary OS commands.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-67243
https://github.com/refirio/freo2/commits/main
https://jvn.jp/en/jp/JVN52865575
https://github.com/advisories/GHSA-3w4q-685g-qf2v