7 matches found
Formie: Missing authorization on sent notification resend modal exposes submission PII
Impact The control panel action formie/sent-notifications/get-resend-modal-content SentNotificationsController::actionGetResendModalContent performed only requireAcceptsJson and loaded a SentNotification by request id without permission or object-level authorization checks. Any authenticated user...
7.7CVSS5.8AI score0.00238EPSS
SaveExploits0References6Affected Software1
20