CyberRota Analysis
AI-GeneratedThe file upload endpoint in Coolify prior to version 4.0.0-beta.474 lacks proper validation for file type and size, allowing authenticated users to upload potentially harmful or excessively large files. This vulnerability could lead to service disruptions or availability issues. Users of Coolify, particularly those managing critical applications and databases, should prioritize upgrading to the patched version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, the file upload endpoint (app/Http/Controllers/UploadController.php) for database backup restore uploads did not enforce file type or size validation, allowing an authenticated user to upload unexpected or oversized files that could affect service availability. This issue is fixed in version 4.0.0-beta.474.