PatchTheCVE: teamworktechttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-14840: TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.https://patchthecve.com/cve/CVE-2017-14840.htmlhttps://patchthecve.com/cve/CVE-2017-14840.htmlWed, 17 Jun 2026 01:06:50 +0000HIGH 8.8: TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.CVE-2017-14839: TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.https://patchthecve.com/cve/CVE-2017-14839.htmlhttps://patchthecve.com/cve/CVE-2017-14839.htmlWed, 17 Jun 2026 01:06:50 +0000HIGH 8.8: TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.CVE-2017-14838: TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange.https://patchthecve.com/cve/CVE-2017-14838.htmlhttps://patchthecve.com/cve/CVE-2017-14838.htmlWed, 17 Jun 2026 01:06:50 +0000HIGH 8.8: TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange.