What is GHSA-7m4m-66m8-f488?

GHSA-7m4m-66m8-f488 is a security advisory published by GitHub Security Advisories with Low severity. An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to...

Which CVE IDs does GHSA-7m4m-66m8-f488 cover?

GHSA-7m4m-66m8-f488 covers the following CVE IDs: CVE-2026-63228. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7m4m-66m8-f488?

GHSA-7m4m-66m8-f488 has a CVSS v3 base score of 2.6, published by GitHub Security Advisories.

GHSA-7m4m-66m8-f488LowCVSS 2.6

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to...

Vendor

GitHub Security Advisories

Published

July 29, 2026

Last Modified

July 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-63228 →

📋 Description

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-63228
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-094
https://github.com/advisories/GHSA-7m4m-66m8-f488