Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insecure Defaults
Vulnerability Description
This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that blocks certain file types, depending on their security needs and policies.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Vulnerability Type
N/A
Vulnerability Title
Umbraco Forms 安全漏洞
Vulnerability Description
Umbraco Forms是一款表单构建工具。 Umbraco Forms（所有版本）中存在安全漏洞。攻击者可利用该漏洞上传任意类型的文件。
CVSS Information
N/A
Vulnerability Type
N/A