Unrestricted file upload

2023-02-2416:15:00

PRIOn knowledge base

www.prio-n.com

file upload vulnerability

umbraco forms

arbitrary code execution

crafted web.config

asp file

unauthenticated attackers

nvd

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.3%

File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file.

CPENameOperatorVersion
umbraco_formseq8.7.0

CPE	Name	Operator	Version
	umbraco_forms	eq	8.7.0

References

umbraco.com

our.umbraco.com/packages/developer-tools/umbraco-forms