Optimizely EPiServer CMS File Upload Validation Vulnerability Allowing Malicious File Execution

A medium-severity vulnerability exists in Optimizely EPiServer.CMS.Core versions prior to 12.32.0. The issue arises because the application fails to properly validate uploaded files, allowing potentially harmful file types, such as .docm and .html, to be uploaded. When these files are accessed by application users, they can execute malicious actions or compromise users' systems.

Impact

Exploitation of this vulnerability could lead to the execution of malicious actions or compromise of users' systems through uploaded files.