ApostropheCMS: Unauthenticated CSV import requests leave rejected uploads in the system temporary directory
Unauthenticated CSV import requests in ApostropheCMS leave rejected uploaded files in the operating system temporary directory. Remote attackers can exploit this behavior by repeatedly submitting large files, exhausting available disk space and causing a denial of service across host services.