bricksforge

Bricksforge through 3.1.8.8 allows a Subscriber to cross the plugin's authorization boundary and obtain elevated privileges. Successful exploitation can compromise site confidentiality, integrity, and availability.

Bricksforge before 3.1.8.8 fails to verify the requester's identity when a Pro Forms form uses the password-reset action in update mode. Server-side current-password verification is disabled by default for that action, so an unauthenticated attacker can set an arbitrary password for any user, including an Administrator, and take over the account.

Bricksforge is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess. The published affected range is <= 3.1.8.6.

Bricksforge is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller. The published affected range is n/a through 3.1.8.4.

Bricksforge is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

Bricksforge is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

Bricksforge is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.