Insufficient Input Validation

🗓️ 20 Jan 2025 05:39:51Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 2 Views

Umbraco.Forms has insufficient input validation allowing data bypass beyond character limits.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2025-23041	14 Jan 202519:10	–	circl
CNNVD	Umbraco Forms 输入验证错误漏洞	14 Jan 202500:00	–	cnnvd
CVE	CVE-2025-23041	14 Jan 202518:54	–	cve
Cvelist	CVE-2025-23041 Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length in Umbraco.Forms	14 Jan 202518:54	–	cvelist
EUVD	EUVD-2025-0070	3 Oct 202520:07	–	euvd
Github Security Blog	Umbraco Forms's Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length	14 Jan 202519:41	–	github
NVD	CVE-2025-23041	14 Jan 202519:15	–	nvd
OSV	CVE-2025-23041 Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length in Umbraco.Forms	14 Jan 202518:54	–	osv
OSV	GHSA-9V8M-QV22-F268 Umbraco Forms's Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length	14 Jan 202519:41	–	osv
Positive Technologies	PT-2025-4787 · Umbraco · Umbraco Forms	14 Jan 202500:00	–	ptsecurity

Vulners

Node

umbracoforms umbracoformsRange4.0.0–8.13.15csharp

OR

umbracoforms umbracoformsMatch4.0.0csharp

OR

umbracoforms umbracoformsMatch4.0.1csharp

OR

umbracoforms umbracoformsMatch4.0.1-build111csharp

OR

umbracoforms umbracoformsMatch4.0.2csharp

OR

umbracoforms umbracoformsMatch4.0.3csharp

OR

umbracoforms umbracoformsMatch4.1.0csharp

OR

umbracoforms umbracoformsMatch4.1.1csharp

OR

umbracoforms umbracoformsMatch4.1.2csharp

OR

umbracoforms umbracoformsMatch4.1.3csharp

OR

umbracoforms umbracoformsMatch4.1.4csharp

OR

umbracoforms umbracoformsMatch4.1.5csharp

OR

umbracoforms umbracoformsMatch4.1.6csharp

OR

umbracoforms umbracoformsMatch4.2.1csharp

OR

umbracoforms umbracoformsMatch4.2.2csharp

OR

umbracoforms umbracoformsMatch4.3.0csharp

OR

umbracoforms umbracoformsMatch4.3.0-betacsharp

OR

umbracoforms umbracoformsMatch4.3.1csharp

OR

umbracoforms umbracoformsMatch4.3.2csharp

OR

umbracoforms umbracoformsMatch4.3.3csharp

OR

umbracoforms umbracoformsMatch4.4.0csharp

OR

umbracoforms umbracoformsMatch4.4.1csharp

OR

umbracoforms umbracoformsMatch4.4.2csharp

OR

umbracoforms umbracoformsMatch4.4.3csharp

OR

umbracoforms umbracoformsMatch4.4.4csharp

OR

umbracoforms umbracoformsMatch4.4.5csharp

OR

umbracoforms umbracoformsMatch4.4.6csharp

OR

umbracoforms umbracoformsMatch4.4.7csharp

OR

umbracoforms umbracoformsMatch4.4.8csharp

OR

umbracoforms umbracoformsMatch4.4.9csharp

OR

umbracoforms umbracoformsMatch6.0.0csharp

OR

umbracoforms umbracoformsMatch6.0.1csharp

OR

umbracoforms umbracoformsMatch6.0.10csharp

OR

umbracoforms umbracoformsMatch6.0.2csharp

OR

umbracoforms umbracoformsMatch6.0.3csharp

OR

umbracoforms umbracoformsMatch6.0.4csharp

OR

umbracoforms umbracoformsMatch6.0.5csharp

OR

umbracoforms umbracoformsMatch6.0.6csharp

OR

umbracoforms umbracoformsMatch6.0.7csharp

OR

umbracoforms umbracoformsMatch6.0.8csharp

OR

umbracoforms umbracoformsMatch6.0.9csharp

OR

umbracoforms umbracoformsMatch7.0.0csharp

OR

umbracoforms umbracoformsMatch7.0.1csharp

OR

umbracoforms umbracoformsMatch7.0.2csharp

OR

umbracoforms umbracoformsMatch7.0.3csharp

OR

umbracoforms umbracoformsMatch7.0.4csharp

OR

umbracoforms umbracoformsMatch7.0.5csharp

OR

umbracoforms umbracoformsMatch7.0.6csharp

OR

umbracoforms umbracoformsMatch7.0.7csharp

OR

umbracoforms umbracoformsMatch7.1.0csharp

OR

umbracoforms umbracoformsMatch7.1.1csharp

OR

umbracoforms umbracoformsMatch7.1.2csharp

OR

umbracoforms umbracoformsMatch7.1.3csharp

OR

umbracoforms umbracoformsMatch7.1.4csharp

OR

umbracoforms umbracoformsMatch7.2.0csharp

OR

umbracoforms umbracoformsMatch7.2.1csharp

OR

umbracoforms umbracoformsMatch7.3.0csharp

OR

umbracoforms umbracoformsMatch7.3.1csharp

OR

umbracoforms umbracoformsMatch7.3.2csharp

OR

umbracoforms umbracoformsMatch7.4.0csharp

OR

umbracoforms umbracoformsMatch7.4.1csharp

OR

umbracoforms umbracoformsMatch7.4.2csharp

OR

umbracoforms umbracoformsMatch7.4.3csharp

OR

umbracoforms umbracoformsMatch7.5.0csharp

OR

umbracoforms umbracoformsMatch7.5.1csharp

OR

umbracoforms umbracoformsMatch7.5.10csharp

OR

umbracoforms umbracoformsMatch7.5.2csharp

OR

umbracoforms umbracoformsMatch7.5.3csharp

OR

umbracoforms umbracoformsMatch7.5.4csharp

OR

umbracoforms umbracoformsMatch7.5.5csharp

OR

umbracoforms umbracoformsMatch7.5.6csharp

OR

umbracoforms umbracoformsMatch7.5.7csharp

OR

umbracoforms umbracoformsMatch7.5.8csharp

OR

umbracoforms umbracoformsMatch7.5.9csharp

OR

umbracoforms umbracoformsMatch8.0.0csharp

OR

umbracoforms umbracoformsMatch8.0.1csharp

OR

umbracoforms umbracoformsMatch8.0.2csharp

OR

umbracoforms umbracoformsMatch8.1.0csharp

OR

umbracoforms umbracoformsMatch8.1.1csharp

OR

umbracoforms umbracoformsMatch8.1.2csharp

OR

umbracoforms umbracoformsMatch8.1.3csharp

OR

umbracoforms umbracoformsMatch8.1.4csharp

OR

umbracoforms umbracoformsMatch8.1.5csharp

OR

umbracoforms umbracoformsMatch8.1.6csharp

OR

umbracoforms umbracoformsMatch8.10.0csharp

OR

umbracoforms umbracoformsMatch8.10.0-rc001csharp

OR

umbracoforms umbracoformsMatch8.10.1csharp

OR

umbracoforms umbracoformsMatch8.10.2csharp

OR

umbracoforms umbracoformsMatch8.10.3csharp

OR

umbracoforms umbracoformsMatch8.11.0csharp

OR

umbracoforms umbracoformsMatch8.11.0-rc001csharp

OR

umbracoforms umbracoformsMatch8.12.0csharp

OR

umbracoforms umbracoformsMatch8.12.0-rc001csharp

OR

umbracoforms umbracoformsMatch8.12.1csharp

OR

umbracoforms umbracoformsMatch8.12.2csharp

OR

umbracoforms umbracoformsMatch8.13.0csharp

OR

umbracoforms umbracoformsMatch8.13.0-rc001csharp

OR

umbracoforms umbracoformsMatch8.13.1csharp

OR

umbracoforms umbracoformsMatch8.13.10csharp

OR

umbracoforms umbracoformsMatch8.13.11csharp

OR

umbracoforms umbracoformsMatch8.13.12csharp

OR

umbracoforms umbracoformsMatch8.13.13csharp

OR

umbracoforms umbracoformsMatch8.13.14csharp

OR

umbracoforms umbracoformsMatch8.13.2csharp

OR

umbracoforms umbracoformsMatch8.13.3csharp

OR

umbracoforms umbracoformsMatch8.13.4csharp

OR

umbracoforms umbracoformsMatch8.13.5csharp

OR

umbracoforms umbracoformsMatch8.13.6csharp

OR

umbracoforms umbracoformsMatch8.13.7csharp

OR

umbracoforms umbracoformsMatch8.13.8csharp

OR

umbracoforms umbracoformsMatch8.13.9csharp

OR

umbracoforms umbracoformsMatch8.2.0csharp

OR

umbracoforms umbracoformsMatch8.2.1csharp

OR

umbracoforms umbracoformsMatch8.2.2csharp

OR

umbracoforms umbracoformsMatch8.2.3csharp

OR

umbracoforms umbracoformsMatch8.3.0csharp

OR

umbracoforms umbracoformsMatch8.3.1csharp

OR

umbracoforms umbracoformsMatch8.3.2csharp

OR

umbracoforms umbracoformsMatch8.3.3csharp

OR

umbracoforms umbracoformsMatch8.3.4csharp

OR

umbracoforms umbracoformsMatch8.4.0csharp

OR

umbracoforms umbracoformsMatch8.4.1csharp

OR

umbracoforms umbracoformsMatch8.4.2csharp

OR

umbracoforms umbracoformsMatch8.4.3csharp

OR

umbracoforms umbracoformsMatch8.4.4csharp

OR

umbracoforms umbracoformsMatch8.5.0csharp

OR

umbracoforms umbracoformsMatch8.5.1csharp

OR

umbracoforms umbracoformsMatch8.5.2csharp

OR

umbracoforms umbracoformsMatch8.5.3csharp

OR

umbracoforms umbracoformsMatch8.5.4csharp

OR

umbracoforms umbracoformsMatch8.5.5csharp

OR

umbracoforms umbracoformsMatch8.5.6csharp

OR

umbracoforms umbracoformsMatch8.5.7csharp

OR

umbracoforms umbracoformsMatch8.6.0csharp

OR

umbracoforms umbracoformsMatch8.6.1csharp

OR

umbracoforms umbracoformsMatch8.6.2csharp

OR

umbracoforms umbracoformsMatch8.7.0csharp

OR

umbracoforms umbracoformsMatch8.7.0-rccsharp

OR

umbracoforms umbracoformsMatch8.7.1csharp

OR

umbracoforms umbracoformsMatch8.7.2csharp

OR

umbracoforms umbracoformsMatch8.7.3csharp

OR

umbracoforms umbracoformsMatch8.7.4csharp

OR

umbracoforms umbracoformsMatch8.7.5csharp

OR

umbracoforms umbracoformsMatch8.7.6csharp

OR

umbracoforms umbracoformsMatch8.8.0csharp

OR

umbracoforms umbracoformsMatch8.8.0-rc001csharp

OR

umbracoforms umbracoformsMatch8.9.0csharp

OR

umbracoforms umbracoformsMatch8.9.0-rc001csharp

OR

umbracoforms umbracoformsMatch8.9.1csharp

OR

umbraco.forms umbraco.formsRange4.0.0–10.5.6csharp

OR

umbraco.forms umbraco.formsRange11.0.0-rc1–13.2.1csharp

OR

umbraco.forms umbraco.formsRange14.0.0-beta001–14.1.1csharp

OR

umbraco.forms umbraco.formsMatch10.0.0csharp

OR

umbraco.forms umbraco.formsMatch10.0.0-rc1csharp

OR

umbraco.forms umbraco.formsMatch10.0.0-rc2csharp

OR

umbraco.forms umbraco.formsMatch10.0.0-rc3csharp

OR

umbraco.forms umbraco.formsMatch10.0.1csharp

OR

umbraco.forms umbraco.formsMatch10.0.2csharp

OR

umbraco.forms umbraco.formsMatch10.0.3csharp

OR

umbraco.forms umbraco.formsMatch10.0.4csharp

OR

umbraco.forms umbraco.formsMatch10.0.5csharp

OR

umbraco.forms umbraco.formsMatch10.1.0csharp

OR

umbraco.forms umbraco.formsMatch10.1.0-rc001csharp

OR

umbraco.forms umbraco.formsMatch10.1.1csharp

OR

umbraco.forms umbraco.formsMatch10.1.2csharp

OR

umbraco.forms umbraco.formsMatch10.1.3csharp

OR

umbraco.forms umbraco.formsMatch10.2.0csharp

OR

umbraco.forms umbraco.formsMatch10.2.0-rc001csharp

OR

umbraco.forms umbraco.formsMatch10.2.1csharp

OR

umbraco.forms umbraco.formsMatch10.2.2csharp

OR

umbraco.forms umbraco.formsMatch10.2.3csharp

OR

umbraco.forms umbraco.formsMatch10.2.4csharp

OR

umbraco.forms umbraco.formsMatch10.3.0csharp

OR

umbraco.forms umbraco.formsMatch10.3.0-rc001csharp

OR

umbraco.forms umbraco.formsMatch10.3.1csharp

OR

umbraco.forms umbraco.formsMatch10.3.2csharp

OR

umbraco.forms umbraco.formsMatch10.3.3csharp

OR

umbraco.forms umbraco.formsMatch10.4.0csharp

OR

umbraco.forms umbraco.formsMatch10.4.0-rc1csharp

OR

umbraco.forms umbraco.formsMatch10.5.0csharp

OR

umbraco.forms umbraco.formsMatch10.5.0-rc1csharp

OR

umbraco.forms umbraco.formsMatch10.5.1csharp

OR

umbraco.forms umbraco.formsMatch10.5.2csharp

OR

umbraco.forms umbraco.formsMatch10.5.3csharp

OR

umbraco.forms umbraco.formsMatch10.5.4csharp

OR

umbraco.forms umbraco.formsMatch10.5.5csharp

OR

umbraco.forms umbraco.formsMatch4.0.0csharp

OR

umbraco.forms umbraco.formsMatch9.0.0csharp

OR

umbraco.forms umbraco.formsMatch9.0.0-beta002csharp

OR

umbraco.forms umbraco.formsMatch9.0.0-beta003csharp

OR

umbraco.forms umbraco.formsMatch9.0.0-beta004csharp

OR

umbraco.forms umbraco.formsMatch9.0.0-rc001csharp

OR

umbraco.forms umbraco.formsMatch9.0.1csharp

OR

umbraco.forms umbraco.formsMatch9.1.0csharp

OR

umbraco.forms umbraco.formsMatch9.1.0-rc001csharp

OR

umbraco.forms umbraco.formsMatch9.1.1csharp

OR

umbraco.forms umbraco.formsMatch9.2.0csharp

OR

umbraco.forms umbraco.formsMatch9.2.0-rc001csharp

OR

umbraco.forms umbraco.formsMatch9.2.1csharp

OR

umbraco.forms umbraco.formsMatch9.2.2csharp

OR

umbraco.forms umbraco.formsMatch9.3.0csharp

OR

umbraco.forms umbraco.formsMatch9.3.0-rc001csharp

OR

umbraco.forms umbraco.formsMatch9.4.0csharp

OR

umbraco.forms umbraco.formsMatch9.4.0-rc001csharp

OR

umbraco.forms umbraco.formsMatch9.4.1csharp

OR

umbraco.forms umbraco.formsMatch9.4.2csharp

OR

umbraco.forms umbraco.formsMatch9.5.0csharp

OR

umbraco.forms umbraco.formsMatch9.5.0-rc001csharp

OR

umbraco.forms umbraco.formsMatch9.5.1csharp

OR

umbraco.forms umbraco.formsMatch9.5.2csharp

OR

umbraco.forms umbraco.formsMatch9.5.3csharp

OR

umbraco.forms umbraco.formsMatch9.5.4csharp

OR

umbraco.forms umbraco.formsMatch9.5.5csharp

OR

umbraco.forms umbraco.formsMatch9.5.6csharp

OR

umbraco.forms umbraco.formsMatch9.5.7csharp

OR

umbraco.forms umbraco.formsMatch9.5.8csharp

OR

umbraco.forms umbraco.formsMatch9.5.9csharp

OR

umbraco.forms umbraco.formsMatch11.0.0csharp

OR

umbraco.forms umbraco.formsMatch11.0.0-rc1csharp

OR

umbraco.forms umbraco.formsMatch11.0.0-rc2csharp

OR

umbraco.forms umbraco.formsMatch11.0.0-rc3csharp

OR

umbraco.forms umbraco.formsMatch11.0.1csharp

OR

umbraco.forms umbraco.formsMatch11.0.2csharp

OR

umbraco.forms umbraco.formsMatch11.0.3csharp

OR

umbraco.forms umbraco.formsMatch11.1.0csharp

OR

umbraco.forms umbraco.formsMatch11.1.0-rc001csharp

OR

umbraco.forms umbraco.formsMatch11.1.1csharp

OR

umbraco.forms umbraco.formsMatch11.1.2csharp

OR

umbraco.forms umbraco.formsMatch11.1.3csharp

OR

umbraco.forms umbraco.formsMatch11.2.0csharp

OR

umbraco.forms umbraco.formsMatch11.2.0-rc1csharp

OR

umbraco.forms umbraco.formsMatch11.2.1csharp

OR

umbraco.forms umbraco.formsMatch12.0.0csharp

OR

umbraco.forms umbraco.formsMatch12.0.0-rc1csharp

OR

umbraco.forms umbraco.formsMatch12.0.0-rc2csharp

OR

umbraco.forms umbraco.formsMatch12.0.0-rc3csharp

OR

umbraco.forms umbraco.formsMatch12.0.0-rc4csharp

OR

umbraco.forms umbraco.formsMatch12.0.0-rc5csharp

OR

umbraco.forms umbraco.formsMatch12.1.0csharp

OR

umbraco.forms umbraco.formsMatch12.1.0-rc1csharp

OR

umbraco.forms umbraco.formsMatch12.1.1csharp

OR

umbraco.forms umbraco.formsMatch12.1.2csharp

OR

umbraco.forms umbraco.formsMatch12.2.0csharp

OR

umbraco.forms umbraco.formsMatch12.2.0-rc1csharp

OR

umbraco.forms umbraco.formsMatch12.2.1csharp

OR

umbraco.forms umbraco.formsMatch12.2.2csharp

OR

umbraco.forms umbraco.formsMatch12.2.3csharp

OR

umbraco.forms umbraco.formsMatch12.2.4csharp

OR

umbraco.forms umbraco.formsMatch13.0.0csharp

OR

umbraco.forms umbraco.formsMatch13.0.0-rc1csharp

OR

umbraco.forms umbraco.formsMatch13.0.0-rc2csharp

OR

umbraco.forms umbraco.formsMatch13.0.0-rc3csharp

OR

umbraco.forms umbraco.formsMatch13.0.0-rc4csharp

OR

umbraco.forms umbraco.formsMatch13.0.0-rc5csharp

OR

umbraco.forms umbraco.formsMatch13.0.1csharp

OR

umbraco.forms umbraco.formsMatch13.0.2csharp

OR

umbraco.forms umbraco.formsMatch13.1.0csharp

OR

umbraco.forms umbraco.formsMatch13.1.0-rccsharp

OR

umbraco.forms umbraco.formsMatch13.1.1csharp

OR

umbraco.forms umbraco.formsMatch13.1.2csharp

OR

umbraco.forms umbraco.formsMatch13.2.0csharp

OR

umbraco.forms umbraco.formsMatch13.2.0-rc1csharp

OR

umbraco.forms umbraco.formsMatch13.2.0-rc2csharp

OR

umbraco.forms umbraco.formsMatch14.0.0csharp

OR

umbraco.forms umbraco.formsMatch14.0.0-beta001csharp

OR

umbraco.forms umbraco.formsMatch14.0.0-beta002csharp

OR

umbraco.forms umbraco.formsMatch14.0.0-beta003csharp

OR

umbraco.forms umbraco.formsMatch14.0.0-beta004csharp

OR

umbraco.forms umbraco.formsMatch14.0.0-rc1csharp

OR

umbraco.forms umbraco.formsMatch14.0.1csharp

OR

umbraco.forms umbraco.formsMatch14.0.2csharp

OR

umbraco.forms umbraco.formsMatch14.1.0csharp

OR

umbraco.forms umbraco.formsMatch14.1.0-rc1csharp

OR

umbraco.forms umbraco.formsMatch14.1.0-rc2csharp

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-23041
github	www.github.com/umbraco/Umbraco.Forms.Issues/security/advisories/GHSA-9v8m-qv22-f268

13 Dec 2025 05:25Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.3 - 5.8

EPSS0.0018

SSVC

input validation server-side validation client-side validation character limits security vulnerability