CVEvulnerability
CVE-2022-24985
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-02-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
Description
Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server. This is relevant only when an organization hosts more than one of these forms on their server.
Affected configurations
• jqueryform jqueryform (< 2022-02-05)
Related
References
- https://JQueryForm.com Vendor Advisory
- https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560 Third Party Advisory
- https://www.nou-systems.com/cyber-security Third Party Advisory
- https://JQueryForm.com Vendor Advisory
- https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560 Third Party Advisory
- https://www.nou-systems.com/cyber-security Third Party Advisory