Description
This affects all versions of package UmbracoForms. When using the default configuration for upload forms, it is possible to upload arbitrary file types. The package offers a way for users to mitigate the issue. The users of this package can create a custom workflow and frontend validation that blocks certain file types, depending on their security needs and policies.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | UmbracoForms | < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | UmbracoForms | <= 8.4.1 | — | GHSA-8m73-w2r2-6xxj |