CVE-2022-31041 is a file upload vulnerability affecting Open Forms versions prior to 1.0.9 and 1.1.1. Insufficient input validation allows users to bypass file extension checks, enabling the upload of malicious files that could then be processed by staff or other applications. Rated as Medium severity (CVSS 6.5), this vulnerability has a low attack complexity and can lead to high integrity impacts, as malicious files can infiltrate internal networks. There is currently no evidence of active exploitation, and no public exploit code or significant community discussion has been observed for this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.0.9CPE matchmatch criteria | cpe:2.3:a:maykinmedia:open_forms:*:*:*:*:*:*:*:* | ||
1.1.0CPE matchmatch criteria | cpe:2.3:a:maykinmedia:open_forms:1.1.0:-:*:*:*:*:*:* | ||
1.1.0CPE matchmatch criteria | cpe:2.3:a:maykinmedia:open_forms:1.1.0:rc0:*:*:*:*:*:* | ||
1.1.0CPE matchmatch criteria | cpe:2.3:a:maykinmedia:open_forms:1.1.0:rc1:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.