{"uuid": "4de91db2-a02a-4666-8ecb-4d406c8a336e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-70849", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/400", "content": "CVE-2025-70849\n\nArbitrary File Upload in podinfo thru 6.9.0 allows unauthenticated attackers to upload arbitrary files via crafted POST request to the /store endpoint. The application renders uploaded content without a restrictive Content-Security-Policy (CSP) or adequate Content-Type validation, leading to Stored Cross-Site Scripting (XSS).", "creation_timestamp": "2026-08-28T00:00:32.159623Z"}