CVE-2025-11436

Medium

Description

A vulnerability was detected in JhumanJ OpnForm up to 1.9.3. Affected by this issue is some unknown functionality of the file /answer. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public and may be used. The patch is identified as 95c3e23856465d202e6aec10bdb6ee0688b5305a. It is advisable to implement a patch to correct this issue.

SeverityMedium

CVSS6.3

Exploit probability—

Product

Jhumanj Opnform

PublishedOct 8, 2025

First seenOct 8, 2025

Weakness typeCWE-434Unrestricted upload of dangerous file type CWE-284Improper access control

How to fix

Patches

github.com/JhumanJ/OpnForm/pull/900/commits/95c3e23856465d202e6aec10bdb6ee0688b5305a

Affected products

Product	Affected versions	Fixed in
jhumanj opnform	v ≤ 1.9.3	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.