CVE-2022-31041

🗓️ 13 Jun 2022 12:35:11Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 463 Views

Open Forms has insufficient input validation for file uploads in versions prior to 1.0.9 and 1.1.1, allowing users to bypass restrictions and upload malicious files. Patches available in versions 1.0.9 and 1.1.1

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-31041	13 Jun 202216:22	–	circl
CNNVD	Open Forms 代码问题漏洞	13 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-31041 Insufficient content-type validation for uploaded files in open-forms	13 Jun 202212:35	–	cvelist
EUVD	EUVD-2022-52727	3 Oct 202520:07	–	euvd
Mend	CVE-2022-31041	13 Jun 202212:35	–	mend
NVD	CVE-2022-31041	13 Jun 202213:15	–	nvd
Prion	Input validation	13 Jun 202213:15	–	prion
Positive Technologies	PT-2022-20481	13 Jun 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-31041: Improper Input Validation	13 Jun 202200:00	–	rapid7
RedhatCVE	CVE-2022-31041	5 Feb 202520:35	–	redhatcve

NVD

Vulners

Node

maykinmedia open_formsRange<1.0.9

maykinmedia open_formsMatch1.1.0-

maykinmedia open_formsMatch1.1.0rc0

maykinmedia open_formsMatch1.1.0rc1

[
  {
    "product": "open-forms",
    "vendor": "open-formulieren",
    "versions": [
      {
        "status": "affected",
        "version": "< 1.0.9"
      },
      {
        "status": "affected",
        "version": ">= 1.1.0-rc0, < 1.1.1"
      }
    ]
  }
]

Source	Link
github	www.github.com/open-formulieren/open-forms/security/advisories/GHSA-h85r-xv4w-cg8g
github	www.github.com/open-formulieren/open-forms/commit/0978a29e821a7228c5d46c0527c3e925eb91b071

17 Jun 2026 04:44Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24

CVSS 3.16.5 - 7.6

EPSS0.00787

SSVC