CVE-2022-24985 - Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server

Back Back to CVE browser

HIGH

Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server

Published Feb 16, 2022

8.8

HIGH

CVSS 3.1

EPSS 2.32%

Description

Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server. This is relevant only when an organization hosts more than one of these forms on their server.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://JQueryForm.com
x_refsource_MISCVendor Advisory
https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560
x_refsource_MISCThird Party Advisory
https://www.nou-systems.com/cyber-security
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://JQueryForm.com		x_refsource_MISCVendor Advisory
https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560		x_refsource_MISCThird Party Advisory
https://www.nou-systems.com/cyber-security		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 16, 2022

Updated Aug 3, 2024

Reserved Feb 13, 2022

Link CVE-2022-24985

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-24985

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-24985