| शीर्षक | GitHub OpnForm 1.9.3 Improper Access Controls |
|---|
| विवरण | Title: Improper Access Controls on /edit
Description: A low privileged user with read-only restrictions is able to view the settings of a form in the /edit endpoint. This can allow a form’s password and other form settings to be leaked.
The vulnerability has confirmed by the vendor to have been patched in v1.9.3 main branch with commit b15e29021d326be127193a5dbbd528c4e37e6324.
Please see the attached Google Doc link for more information under 7. Improper Access Controls on the /forms/<form-slug>/edit Endpoint and the Response from the Vendor section for more detail.
Vulnerable version: https://github.com/JhumanJ/OpnForm/tree/v1.9.3
Patched Commit: https://github.com/JhumanJ/OpnForm/pull/900/commits/b15e29021d326be127193a5dbbd528c4e37e6324 |
|---|
| स्रोत | ⚠️ https://docs.google.com/document/d/1GUjJA9vUbsXUngAv6ySsbCIhVynf8_djardLZYEDOe0/edit?tab=t.0#heading=h.t78mmp24qqk5 |
|---|
| उपयोगकर्ता | balejin (UID 89385) |
|---|
| सबमिशन | 01/10/2025 09:06 PM (1 वर्ष पहले) |
|---|
| संयम | 07/10/2025 03:17 PM (6 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 327377 [JhumanJ OpnForm तक 1.9.3 /edit अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|