CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Veracode•added 2025/11/17 7:37 a.m.•2 views

Improper Access Control

formcms is vulnerable to Improper Access Control. The vulnerability is due to insufficient authentication checks on the /api/schemas/history/schemaId endpoint, which allows an attacker to access historical schema data if a valid schemaId is known or guessed...

6.5CVSS7.1AI score0.00104EPSS

Exploits0References5Affected Software1

Github Security Blog•added 2025/09/30 6:30 p.m.•5 views

FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint

An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/schemaId endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed...

6.5CVSS7AI score0.00104EPSS

Exploits0References6Affected Software1