CVE-2025-68924
1 advisory.
NuGet/UmbracoForms CVE-2025-68924: critical 9.9
UmbracoForms Vulnerable to Remote Code Execution via Untrusted WSDL Compilation in Dynamic SOAP Client Generation
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 8.13.16 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vrgw-pc9c-qrrc
- https://github.com/umbraco/Umbraco.Forms.Issues/security/advisories/GHSA-vrgw-pc9c-qrrc
- https://nvd.nist.gov/vuln/detail/CVE-2025-68924
- https://github.com/advisories/GHSA-vrgw-pc9c-qrrc
- https://github.com/umbraco/Umbraco.Forms.Issues
- https://our.umbraco.com/packages/developer-tools/umbraco-forms
- https://www.nuget.org/packages/UmbracoForms
CVE-2025-68924 · published · modified · JSON