CVE-2022-24985

Katalog CVE

CVSS 8.8 · High EPSS 2,3%

Kerentanan pada jqueryform. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server. This is relevant only when an organization hosts more than one of these forms on their server.

Rincian

Terbit di NVD

16 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

2,3% peluang dieksploitasi; lebih tinggi dari 83,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://JQueryForm.com advisory vendor
• https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560 advisory pihak ketiga
• https://www.nou-systems.com/cyber-security advisory pihak ketiga