CNNVD-202510-1183 Information

CNNVD ID

CNNVD-202510-1183

CVE-2025-11436

  • CNNVD Published: 2025-10-08

Description (Chinese)

OpnForm是Julien Nahum个人开发者的一个表单生成器。 OpnForm 1.9.3及之前版本存在代码问题漏洞,该漏洞源于文件/answer存在不受限制的上传功能,可能导致远程攻击。

Description (English)

OpnForm is a form generator for Julien Nahum personal developers. OpnForm 1.9.3 and previous versions had a code problem loophole, which stemmed from the unrestricted upload function of the document/answer, which could lead to a remote attack.

Hazard Level

High

Vulnerability Type

代码问题

Affected Vendor

个人开发者

Published

2025-10-08

Last Modified

2026-02-24

References

https://docs.google.com/document/d/1GUjJA9vUbsXUngAv6ySsbCIhVynf8_djardLZYEDOe0/edit?tab=t.0#heading=h.dm5ttliupfqn https://github.com/JhumanJ/OpnForm/pull/900/commits/95c3e23856465d202e6aec10bdb6ee0688b5305a https://vuldb.com/?ctiid.327373 https://vuldb.com/?id.327373 https://vuldb.com/?submit.666877

Patch

https://opnform.com/

Share on: