MEDIUM5.8

GHSA-9v8m-qv22-f268

Umbraco Forms's Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length

Quick fix

GHSA-9v8m-qv22-f268 — Umbraco.Forms: upgrade to the fixed version with the command below.

dotnet add package Umbraco.Forms --version 10.5.7

Details

### Impact

Character limits configured by editors for short and long answer fields are validated only client-side, not server-side.

### Patches

Patched in 8.13.16, 10.5.7, 13.2.2, 14.1.2

Enter the version of the package you're using.

Introduced in: 0Fixed in: 10.5.7

Fixdotnet add package Umbraco.Forms --version 10.5.7

Introduced in: 0Fixed in: 8.13.16

Fixdotnet add package UmbracoForms --version 8.13.16

Introduced in: 11.0.0-rc1Fixed in: 13.2.2

Fixdotnet add package Umbraco.Forms --version 13.2.2

Introduced in: 14.0.0-beta001Fixed in: 14.1.2

Fixdotnet add package Umbraco.Forms --version 14.1.2