Skip to content
OpenAdvisories

Vendor

civiform

1 known vulnerabilities.

Products

civiform 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.5
    CVE-2026-107856

    CiviForm: Trusted-Intermediary IDOR discloses any citizen's name and email

    CiviForm simplifies applications for government benefits programs by reusing applicant data across multiple benefit applications. Prior to 3.33.0, GET /admin/tiDash/editClientForm/:accountId verifies that the requester is a Trusted Intermediary but showEditCl…

    civiform civiform