Description (CNA)
In Umbraco UmbracoForms through 8.13.16, an authenticated attacker can supply a malicious WSDL (aka Webservice) URL as a data source for remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Umbraco / Forms | affected 0 through 8.13.16 |
CWE
CWE-829
References
- https://our.umbraco.com/packages/developer-tools/umbraco-forms/
- https://github.com/advisories/GHSA-vrgw-pc9c-qrrc
- https://www.nuget.org/packages/UmbracoForms
ADP enrichment
No English description supplied.
No references supplied.