PT-2023-26402 · Saturday Drive · Ninja Forms

Rafie Muhammad

·

CVE-2023-38393

·

Publicado

2023-07-31

·

Atualizado

2025-12-10

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Ninja Forms versions 3.6.25 and earlier
Description The issue is related to a Missing Authorization vulnerability in Saturday Drive Ninja Forms.
Recommendations For versions 3.6.25 and earlier, update to a version later than 3.6.25 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.

Correção

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2023-38393

Produtos afetados

Ninja Forms