CVE-2024-35174

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Missing Authorization vulnerability in Flothemes Flo Forms.This issue affects Flo Forms: from n/a through 1.0.42.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-862

Affected software

VendorProductVersions
FlothemesFlo Forms<= 1.0.42
flothemesflo_forms<= 1.0.42

References

Timeline

Published
May 17, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-351755.3sshpiper is a reverse proxy for sshd. Starting in version 1.0.50 and prior to version 1.3.0, the way the proxy protocol listener is implemenCVE-2024-351765.3REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s CVE-2024-351777.8Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across oCVE-2024-351787.5The Jupyter Server provides the backend for Jupyter web applications. Jupyter Server on Windows has a vulnerability that lets unauthenticateCVE-2024-351796.8Stalwart Mail Server is an open-source mail server. Prior to version 0.8.0, when using `RUN_AS_USER`, the specified user (and therefore, webCVE-2024-35186.5The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode(s) in all versions up to, and incCVE-2024-351806.1OMERO.web provides a web based client and plugin infrastructure. There is currently no escaping or validation of the `callback` parameter thCVE-2024-351818.1Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. CVE-2024-351828.1Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructure and applications. CVE-2024-351834.4wolfictl is a command line tool for working with Wolfi. A git authentication issue in versions prior to 0.16.10 allows a local user’s GitHubCVE-2024-351845.5Paperless-ngx is a document management system that transforms physical documents into a searchable online archive. Starting in version 2.5.0CVE-2024-351855.3Minder is a software supply chain security platform. Prior to version 0.0.49, the Minder REST ingester is vulnerable to a denial of service
CVE-2024-35174: Medium severity, CVSS 5.3 | Vulnix