Elastic Email Subscribe Form, CVE-2025-28985

CVE, Research URL: CVE-2025-28985
Home page URL: Security reports for Elastic Email Subscribe Form
Application: Elastic Email Subscribe Form
Published on: Jun 06, 2025
Research Description: Missing Authorization vulnerability in Elastic Email Elastic Email Subscribe Form allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elastic Email Subscribe Form: from n/a through 1.2.2.
Affected versions: max 1.2.2.
Status: vulnerable