PT-2026-145018

CVE-2026-119529

Published

2026-11-11

Updated

2026-11-12

Description by

CVSS 3.1

5.9

Medium

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gravity Forms versions prior to 3.2.2

Description An issue exists in the chunked file upload feature where the plugin fails to properly restrict the file types that unauthenticated users can upload. On servers configured to parse Server-Side Include (SSI) documents, such as Apache with SSI enabled, this allows an attacker to read server environment variables and the contents of files within the web root. Server-Side Includes are directives used to inject dynamic content into HTML pages before they are sent to the client.

Recommendations Update Gravity Forms to version 3.2.2 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Endangcamon

Vendors

Affected products

Weakness enumeration

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')

Related identifiers