What is GHSA-rm34-fg4m-39mw?

GHSA-rm34-fg4m-39mw is a security advisory published by GitHub Security Advisories with High severity. OpenSTAManager contains an arbitrary file upload vulnerability in its module update functionality

Which CVE IDs does GHSA-rm34-fg4m-39mw cover?

GHSA-rm34-fg4m-39mw covers the following CVE IDs: CVE-2026-38751. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rm34-fg4m-39mw?

GHSA-rm34-fg4m-39mw has a CVSS v3 base score of 7.2, published by GitHub Security Advisories.

Which products are affected by GHSA-rm34-fg4m-39mw?

GHSA-rm34-fg4m-39mw affects 1 product, including: composer/devcode-it/openstamanager:\u003c= 2.10-beta.

GHSA-rm34-fg4m-39mwHighCVSS 7.2

OpenSTAManager contains an arbitrary file upload vulnerability in its module update functionality

Vendor

GitHub Security Advisories

Published

May 4, 2026

Last Modified

May 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-38751 →

📋 Description

OpenSTAManager versions 2.10 and earlier contain an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_modules.php).

🎯 Affected products1

composer/devcode-it/openstamanager:<= 2.10-beta

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-38751
https://github.com/devcode-it/openstamanager
https://github.com/fuutianyii/poc
https://github.com/advisories/GHSA-rm34-fg4m-39mw