Lucene search
Veracode Vulnerability DatabaseVERACODE:47269HistoryMay 30, 2024 - 7:21 a.m.
Exposure Of Sensitive Information To An Unauthorized Actor
2024-05-3007:21:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
exposure of sensitive information
unauthorized actor
authorization checks
submission notification emails
attacker
sensitive files
forms
software vulnerability
6.8 Medium
AI Score
Confidence
High
silverstripe/userforms is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. This vulnerability is due to insufficient authorization checks in submission notification emails, potentially enabling an attacker to access sensitive files uploaded through the forms without proper authorization.
6.8 Medium
AI Score
Confidence
High