CVE-2017-17794

Critical

Published: 20/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In BlogoText versions up to 3.7.6, a vulnerability allows attackers to bypass intended access restrictions via the email address field in the validate_form_preferences function in admin/preferences.php.

Risk Assessment

Organizations may be exposed to unauthorized access to sensitive data, potentially leading to a loss of confidentiality.

Recommendation

It is recommended to update BlogoText to the latest version to mitigate this vulnerability and review application security.

Original NVD description (English source)

validate_form_preferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field.