Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 4 min 160 bronnen 2 kritiek 30 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-119529

MEDIUM · 5.9 CVSS Gepubliceerd: CWE-22

Beschrijving

The Gravity Forms WordPress plugin before 3.2.2 does not properly restrict the file types that unauthenticated users can upload through its chunked file upload feature, allowing them to read server environment variables and the contents of files within the web root on servers configured to parse Server-Side Include documents, such as Apache with SSI enabled.

References