Lucene search
HistorySep 08, 2022 - 8:15 a.m.
CVE-2022-38400
mailform pro
remote access
user input
data disclosure
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
0.005 Low
EPSS
Percentile
76.6%
Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL.
Affected configurations
Node
synckmailform_pro_cgiRange≤4.3.1
Related
cve
cve
CVE-2022-38400
2022-09-08 08:15:08
cvelist
cvelist
CVE-2022-38400
2022-09-08 07:10:47
prion
prion
Input validation
2022-09-08 08:15:00
jvn
jvn
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
0.005 Low
EPSS
Percentile
76.6%
Related for NVD:CVE-2022-38400