CVE-2024-33593

CWE-862 — Missing Authorization3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.1%
top 66.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Rednao Smart Forms
Timeline
PublishedApr 29

Description

Missing Authorization vulnerability in RedNao Smart Forms.This issue affects Smart Forms: from n/a through 2.6.91.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDrednao/smart_forms< 2.6.92
▶CVEListV5rednao/smart_formsn/a — 2.6.91

🔴Vulnerability Details

2
CVEList
WordPress Smart Forms plugin <= 2.6.91 - Broken Access Control vulnerability↗2024-04-29
▶
GHSA
GHSA-xh2c-m49q-f2gf: Missing Authorization vulnerability in RedNao Smart Forms↗2024-04-29
▶
CVE-2024-33593 (MEDIUM CVSS 4.3) | Missing Authorization vulnerability | cvebase.io