VWE-2017-4004 Viewing Source [template]Vulnerability | cve= | aka= | severity=Minor | difficulty=Easy | description=Permissions escalation. For some file types, a user can upload images with a higher width or height than allowed as long as the number of pixels is smaller than the permitted amount. | lite=no | discover-date=August 12, 2017 | patch-date=September 24, 2017 | patches=4.0.19 Patch Level 2 4.0.18 Patch Level 3 4.0.17 Patch Level 5 4.0.16 Patch Level 6 4.0.15 Patch Level 10 | workaround=In Content > Attachments, for each image file-type, set both maximum width and maximum height to the same number.[/template] 611 characters