In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-26968.json"