Description
In Umbraco UmbracoForms through 8.13.16, an authenticated attacker can supply a malicious WSDL (aka Webservice) URL as a data source for remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Umbraco | Forms | ≤ 8.13.16 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| NuGet | UmbracoForms | <= 8.13.16 | — | GHSA-vrgw-pc9c-qrrc |