A security issue has been reported in NeatUpload, which can be exploited by malicious people to gain knowledge of potentially sensitive information.

The security issue is caused due to a race condition when sending multiple responses, which may allow sensitive data to be sent to malicious people.

The security issue is reported in NeatUpload-1.2.11 through NeatUpload-1.2.16, NeatUpload-1.1.18 through NeatUpload-1.1.23, and NeatUpload-trunk.379 through NeatUpload-trunk.445. Other versions may also be affected.

Solution
Update to version 1.2.17.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Jamie Howell (starnow.com) and Michael Teper (Elanex, Inc.).

Changelog
Further details available in Customer Area

Original Advisory
http://www.brettle.com/neatupload

Deep Links
Links available in Customer Area