Skip to content
OpenAdvisories

Product · open-formulieren

open-forms

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.7
    CVE-2024-24771

    Open Forms potential multi-factor authentication bypass

    Open Forms allows users create and publish smart forms. Versions prior to 2.2.9, 2.3.7, 2.4.5, and 2.5.2 contain a non-exploitable multi-factor authentication weakness. Superusers who have their credentials (username + password) compromised could potentially …

    open-formulieren open-forms
  • High 7.6
    CVE-2022-31041

    Insufficient content-type validation for uploaded files in open-forms

    Open Forms is an application for creating and publishing smart forms. Open Forms supports file uploads as one of the form field types. These fields can be configured to allow only certain file extensions to be uploaded by end users (e.g. only PDF / Excel / ..…

    open-formulieren open-forms
  • High 7.1
    CVE-2022-31040

    Open Redirect in open-forms

    Open Forms is an application for creating and publishing smart forms. Prior to versions 1.0.9 and 1.1.1, the cookie consent page in Open Forms contains an open redirect by injecting a `referer` querystring parameter and failing to validate the value. A malici…

    open-formulieren open-forms