Pega Customer Service Framework versions 8.7.0 through 25.1.0 are affected by a Unrestricted file upload vulnerability, where a privileged user could potentially upload a malicious file.CreditsDaniel Dorego from AFLACReferenceshttps://support.pega.com/support-doc/pega-security-advisory-l25-vulnerability-remediation-note
