Umbraco UmbracoForms Remote Code Execution Vulnerability via Malicious WSDL URL

A remote code execution vulnerability exists in Umbraco UmbracoForms versions through 8.13.16. An authenticated attacker can exploit this issue by providing a malicious WSDL (Web Service Description Language) URL as a data source, which is then processed by the application, leading to unauthorized code execution.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where Umbraco Forms is installed.

Remediation

Users are advised to upgrade to Umbraco Forms version 13.0.0 or later. Instructions for upgrading can be found in the Umbraco Forms documentation.