'Valid customer form submission data is not impacted and is not accessible to the third party. 'The vulnerability described here in this advisory is being exploited in a way where an unauthenticated third party can use Laserfiche Forms to temporarily host uploaded files for distribution,' states the company in the security advisory. This can be accessed by unauthenticated actors to upload files to your web portal and make their content temporarily accessible on the web.

Parts of Laserfiche Forms contain a public form that has a file upload field. Laserfiche has now released a security advisory for the vulnerability, along with instructions on how to clean up your website from spam content.Īccording to the company, the root cause of the issue is an unauthenticated File Upload vulnerability. Laiserfiche releases cleanup tool, not all versions fixed Previously, attackers have abused the open redirect functionality on government websites like that of the National Weather Service to boost SEO for their content and redirect users to porn sites. This isn't the only attack vector leveraged by spammers.

Download vodafone station firmware hack