Beveiligingsadvies

CVE-2020-7685

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-07-28 16:25:15
Laatst bijgewerkt 2024-09-16 17:14:53
Toegewezen door snyk
CVSS-score 5.4
Status PUBLISHED

Beschrijving

This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that blocks certain file types, depending on their security needs and policies.