~ / search / GHSA-6cwx-42hw-w69c

GHSA-6cwx-42hw-w69c

FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-55797

Packages

EcosystemPackageAffectedFixed in
NuGet FormCMS < 0.5.5 0.5.5

Details

As written in the advisory (Markdown source, shown as plain text).

An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed.

References

External links from the advisory. They lead to third-party sites.