2 matches found
CVE-2026-57581 DotVVM: Unrestricted file upload
DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, applications with configured file upload storage allow unauthenticated users to submit files directly to DotvvmFileUploadMiddleware without an X-DotVVM-UploadToken generated by the...
5.3CVSS5.8AI score0.00593EPSS
SaveExploits0References6
CVE-2026-57581: Unrestricted Upload of File with Dangerous Type
DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, applications with configured file upload storage allow unauthenticated users to submit files directly to DotvvmFileUploadMiddleware without an X-DotVVM-UploadToken generated by the...
5.3CVSS5.7AI score0.00593EPSS
SaveExploits0References2
20