CVE advisoryCRITICAL
CVE-2021-33224
Umbraco Forms Unauthenticated Arbitrary Code Execution
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
Umbraco Forms version 8.7.0 has a critical vulnerability allowing unauthenticated attackers to execute arbitrary code by uploading crafted files. This is a concern as Umbraco Forms are often used on public-facing websites. The primary risk is unauthorized code execution on the server, potentially impacting web applicat