CVE-2020-7685 — Insecure Defaults
This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way…
Published: 2020-07-28 · CVSS: 5.4 · CVSS 3.1
This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that blocks certain file types, depending on their security needs and policies.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7