Skip to content
OpenAdvisories

Vendor

neos

1 known vulnerabilities.

Products

form 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2021-32697

    Form validation can be skipped

    neos/forms is an open source framework to build web forms. By crafting a special `GET` request containing a valid form state, a form can be submitted without invoking any validators. Form state is secured with an HMAC that is still verified. That means that t…

    neos form neos/form Packagist