Description
This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that blocks certain file types, depending on their security needs and policies.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | UmbracoForms | affected |
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2020-0545 | This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that blocks certain file types, depending on their security needs and policies. |
 Github GHSA |
GHSA-8m73-w2r2-6xxj | Insecure defaults in UmbracoForms |
References
| Link | Providers |
|---|---|
| https://snyk.io/vuln/SNYK-DOTNET-UMBRACOFORMS-595765 |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: snyk
Published:
Updated: 2024-09-16T17:14:53.209Z
Reserved: 2020-01-21T00:00:00.000Z
Link: CVE-2020-7685
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-07-28T17:15:15.740
Modified: 2024-11-21T05:37:36.560
Link: CVE-2020-7685
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses