Vulnerabilities and security researches forelastic-email-subscribe-form elastic-email-subscribe-form

Jun 15, 2025

CVE, Research URL: CVE-2025-28985
Home page URL: Security reports for Elastic Email Subscribe Form
Application: Elastic Email Subscribe Form
Date: Jun 06, 2025
Research Description: Missing Authorization vulnerability in Elastic Email Elastic Email Subscribe Form allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elastic Email Subscribe Form: from n/a through 1.2.2.
Affected versions: max 1.2.2.
Status: vulnerable