Kiteworks Secure Data Forms Unrestricted File Upload Vulnerability Prior to 9.2.1

A vulnerability allowing unrestricted file upload of dangerous types has been identified in Kiteworks Secure Data Forms versions prior to 9.2.1. This issue arises from a lack of proper validation, potentially allowing form managers to exploit the vulnerability.

Impact

Exploitation of this vulnerability could lead to the upload of malicious files, which could be executed or cause harm to the system.

Remediation

Users are advised to upgrade Kiteworks to version 9.2.1 or later.