| शीर्षक | GitHub OpnForm 1.9.3 Unrestricted Upload |
|---|
| विवरण | Title: Unrestricted File Upload Allows Arbitrary Files to Execute Malicious Javascript
Description: Unrestricted file upload exists on the file upload and signature blocks that allow an attacker to upload HTML and SVG files containing malicious JS. The malicious JS is then executed when a victim opens the file in a new tab.
The vulnerability has confirmed by the vendor to have been patched in v1.9.3 main branch with commit 95c3e23856465d202e6aec10bdb6ee0688b5305a.
Please see the attached Google Doc link for more information under 2. Unrestricted File Upload Allows Arbitrary Files to Execute Malicious JavaScript and the Response from the Vendor section for more detail.
Vulnerable version: https://github.com/JhumanJ/OpnForm/tree/v1.9.3
Patched Commit: https://github.com/JhumanJ/OpnForm/pull/900/commits/95c3e23856465d202e6aec10bdb6ee0688b5305a |
|---|
| स्रोत | ⚠️ https://docs.google.com/document/d/1GUjJA9vUbsXUngAv6ySsbCIhVynf8_djardLZYEDOe0/edit?tab=t.0#heading=h.dm5ttliupfqn |
|---|
| उपयोगकर्ता | balejin (UID 89385) |
|---|
| सबमिशन | 01/10/2025 08:54 PM (1 वर्ष पहले) |
|---|
| संयम | 07/10/2025 03:17 PM (6 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 327373 [JhumanJ OpnForm तक 1.9.3 /answer अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|