CVE-2023-45275

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jan 2, 2025
CWE ID 862

Summary

CVE-2023-45275 is a missing authorization vulnerability affecting the Kali Forms Contact Form builder with drag & drop. This issue arises due to Kali Forms' failure to enforce proper access control security levels, which enables exploitation. Impacted versions of the Contact Form builder, from n/a to 2.3.28, are vulnerable to this flaw. An attacker can potentially gain unauthorized access to sensitive information or perform unintended actions within the platform. Organizations using Kali Forms are advised to upgrade to a patched version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share