Skip to content
OpenAdvisories

Product · Synergetic Data Systems

UnForm Server

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.7

    UnForm Server < 10.1.15 Doc Flow Unauthenticated File Read

    UnForm Server versions < 10.1.15 contain an unauthenticated arbitrary file read and SMB coercion vulnerability in the Doc Flow feature’s 'arc' endpoint. The Doc Flow module uses the 'arc' handler to retrieve and render pages or resources specified by the user…