Form validation can be skipped

🗓️ 22 Jun 2021 15:15:08Reported by GitHub Advisory DatabaseType

Form validation can be skipped Impact severity low due to secured form state with HMAC. Exploited only if Form Finishers cause side effects with no form values

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-32697	21 Jun 202122:15	–	circl
CNNVD	Neos/forms 输入验证错误漏洞	21 Jun 202100:00	–	cnnvd
CVE	CVE-2021-32697	21 Jun 202118:15	–	cve
Cvelist	CVE-2021-32697 Form validation can be skipped	21 Jun 202118:15	–	cvelist
EUVD	EUVD-2021-1353	7 Oct 202500:30	–	euvd
Friends Of PHP	Form validation can be skipped in neos/form	21 Jun 202117:00	–	friendsofphp
NVD	CVE-2021-32697	21 Jun 202119:15	–	nvd
OSV	GHSA-M5VX-8CHX-QVMM Form validation can be skipped	22 Jun 202115:15	–	osv
Prion	Design/Logic Flaw	21 Jun 202119:15	–	prion
RedhatCVE	CVE-2021-32697	22 May 202519:45	–	redhatcve

Vulners

Node

neos formRange5.1.0–5.1.3composer

neos formRange5.0.0–5.0.9composer

neos formRange1.2.0–4.3.3composer

Source	Link
github	www.github.com/neos/form/security/advisories/GHSA-m5vx-8chx-qvmm
github	www.github.com/neos/form-ghsa-m5vx-8chx-qvmm/pull/1
github	www.github.com/neos/form/commit/69de4219b1f58157e2be6b05811463875d75c246
github	www.github.com/neos/form/releases/tag/5.1.3
github	www.github.com/neos/form/commit/049d415295be8d4a0478ccba97dba1bb81649567
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-32697
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/neos/form/CVE-2021-32697.yaml
github	www.github.com/advisories/GHSA-m5vx-8chx-qvmm

07 Feb 2024 18:18Current

0.4Low risk

Vulners AI Score0.4

CVSS 25

CVSS 3.15.3 - 6.5

EPSS0.00396

CWE-20