ZeroHour

CVE-2022-24985

CVSS 3.1
8.8 high
EPSS
2%p82
Published
()
Modified
Description

Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server. This is relevant only when an organization hosts more than one of these forms on their server.

Vendors
jqueryform
Products
jqueryform
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.