Описание
An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed.
Ссылки
- Product
- Product
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:formcms:formcms:0.5.4:*:*:*:*:*:*:*
EPSS
Процентиль: 25%
0.00088
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-284
Связанные уязвимости
github
4 месяца назад
FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint
EPSS
Процентиль: 25%
0.00088
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-284