CVE-2023-45275
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 2, 2025
CWE ID 862
Summary
CVE-2023-45275 is a missing authorization vulnerability affecting the Kali Forms Contact Form builder with drag & drop. This issue arises due to Kali Forms' failure to enforce proper access control security levels, which enables exploitation. Impacted versions of the Contact Form builder, from n/a to 2.3.28, are vulnerable to this flaw. An attacker can potentially gain unauthorized access to sensitive information or perform unintended actions within the platform. Organizations using Kali Forms are advised to upgrade to a patched version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.