Umbraco Forms v.8.7.0 File Upload Vulnerability Allows Arbitrary Code Execution

Umbraco Forms v.8.7.0 File Upload Vulnerability Allows Arbitrary Code Execution

CVE-2021-33224 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config and asp file.

Learn more about our Web App Pen Testing.