CVE-2022-45806

Missing Authorization vulnerability in Strategy11 Form Builder Team Formidable Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Formidable Forms: from n/a through 5.5.4.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://patchstack.com/database/wordpress/plugin/formidable/vulnerability/wordpress-formidable-forms-plugin-5-5-4-broken-access-control-vulnerability?_s_id=cve	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:strategy11:formidable_forms:*:*:*:*:free:wordpress:*:*

History

05 Feb 2025, 14:36

Type	Values Removed	Values Added
CPE		cpe:2.3:a:strategy11:formidable_forms:::::free:wordpress::
First Time		Strategy11 Strategy11 formidable Forms
Summary		(es) La vulnerabilidad de autorización faltante en Strategy11 Form Builder Team Formidable Forms permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Formidable Forms: desde n/a hasta 5.5.4.
References	~~() https://patchstack.com/database/wordpress/plugin/formidable/vulnerability/wordpress-formidable-forms-plugin-5-5-4-broken-access-control-vulnerability?_s_id=cve -~~	() https://patchstack.com/database/wordpress/plugin/formidable/vulnerability/wordpress-formidable-forms-plugin-5-5-4-broken-access-control-vulnerability?_s_id=cve - Third Party Advisory

13 Dec 2024, 15:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-12-13 15:15

Updated : 2025-02-05 14:36

NVD link : CVE-2022-45806

Mitre link : CVE-2022-45806

CVE.ORG link : CVE-2022-45806

JSON object : View

Products Affected

strategy11

formidable_forms

CWE

CWE-862

Missing Authorization

{"id": "CVE-2022-45806", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "audit@patchstack.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-12-13T15:15:07.957", "references": [{"url": "https://patchstack.com/database/wordpress/plugin/formidable/vulnerability/wordpress-formidable-forms-plugin-5-5-4-broken-access-control-vulnerability?_s_id=cve", "tags": ["Third Party Advisory"], "source": "audit@patchstack.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "audit@patchstack.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in Strategy11 Form Builder Team Formidable Forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Formidable Forms: from n/a through 5.5.4."}, {"lang": "es", "value": "La vulnerabilidad de autorizaci\u00f3n faltante en Strategy11 Form Builder Team Formidable Forms permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Formidable Forms: desde n/a hasta 5.5.4."}], "lastModified": "2025-02-05T14:36:08.000", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:strategy11:formidable_forms:*:*:*:*:free:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "60236F7A-D93D-4D76-99EB-0D69574267B9", "versionEndExcluding": "5.5.5"}], "operator": "OR"}]}], "sourceIdentifier": "audit@patchstack.com"}