PT-2024-13576 · 10Web · Form Maker

Qilin_99 · Published 2024-06-04 · Updated 2024-06-04 · CVE-2023-48290

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Form Maker by 10Web versions 1.15.20 and earlier

Description The issue is related to an Improper Restriction of Excessive Authentication Attempts, allowing Functionality Bypass. This means that an attacker could potentially bypass certain functionality due to the lack of proper restrictions on authentication attempts.

Recommendations For versions 1.15.20 and earlier, update to a version later than 1.15.20 to resolve the issue. As a temporary workaround, consider restricting access to the Form Maker by 10Web to minimize the risk of exploitation.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2023-48290

Affected Products

Form Maker

References · 5

• https://osv.dev/vulnerability/CVE-2023-48290 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-48290 · Security Note
• https://patchstack.com/database/vulnerability/form-maker/wordpress-form-maker-by-10web-plugin-1-15-20-captcha-bypass-vulnerability-vulnerability?_s_id=cve · Note
• https://t.me/cvenotify/81891 · Telegram Post
• https://twitter.com/CVEnew/status/1797944146499362859 · Twitter Post