8.8
CVE-2022-24985
- EPSS 0.7%
- Veröffentlicht 16.02.2022 22:15:08
- Zuletzt bearbeitet 21.11.2024 06:51:30
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginForms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server. This is relevant only when an organization hosts more than one of these forms on their server.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Jqueryform ≫ Jqueryform Version < 2022-02-05
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.7% | 0.717 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6 | 6.8 | 6.4 |
AV:N/AC:M/Au:S/C:P/I:P/A:P
|