formtools.org Form Tools Setting code injection
Published Jul 21, 2024
5.1
MEDIUMCVSS 4.0
EPSS 0.40%
Description
A vulnerability, which was classified as problematic, has been found in formtools.org Form Tools 3.1.1. This issue affects some unknown processing of the file /admin/settings/index.php?page=accounts of the component Setting Handler. The manipulation of the argument Page Theme leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-271991. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
-
- Version 3.1.1StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Formtools.org | Form Tools | n/a |
|
- 3.1.1
-
- Version 3.1.1StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Formtools | Form Tools | n/a |
|
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (5)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47922 Advisory
- https://github.com/DeepMountains/Mirage/blob/main/CVE2-2.md exploitBroken Link
- https://vuldb.com/?ctiid.271991 signaturepermissions-requiredPermissions Required
- https://vuldb.com/?id.271991 vdb-entrytechnical-descriptionThird Party Advisory
- https://vuldb.com/?submit.372318 third-party-advisoryThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-47922 | Advisory | |
| https://github.com/DeepMountains/Mirage/blob/main/CVE2-2.md | exploitBroken Link | |
| https://vuldb.com/?ctiid.271991 | signaturepermissions-requiredPermissions Required | |
| https://vuldb.com/?id.271991 | vdb-entrytechnical-descriptionThird Party Advisory | |
| https://vuldb.com/?submit.372318 | third-party-advisoryThird Party Advisory |
Change history (0)
No recorded changes yet.