CVE-2022-24983

Forms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by capturing the POST response. When chained with CVE-2022-24984, this could lead to unauthenticated remote code execution on the underlying web server. This occurs because the Unique ID field is contained in the POST response upon submitting a form.

• CWE-22

• https://JQueryForm.comVendor Advisory
• https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560Third Party Advisory
• https://www.nou-systems.com/cyber-securityThird Party Advisory
• https://JQueryForm.comVendor Advisory
• https://gist.github.com/pb-nsi/4d0a1ede76d4e97083b3435f820bf560Third Party Advisory
• https://www.nou-systems.com/cyber-securityThird Party Advisory

Published

Feb 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24978Zoho ManageEngine ADAudit Plus before 7055 allows authentica…8.8
• CVE-2022-24979An issue was discovered in the Varnishcache extension before…5.3
• CVE-2022-2498An issue in pipeline subscriptions in GitLab EE affecting al…7.5
• CVE-2022-24980An issue was discovered in the Kitodo.Presentation (aka dif)…7.5
• CVE-2022-24981A reflected cross-site scripting (XSS) vulnerability in form…6.1
• CVE-2022-24982Forms generated by JQueryForm.com before 2022-02-05 allows a…6.5
• CVE-2022-24984Forms generated by JQueryForm.com before 2022-02-05 (if file…9.8
• CVE-2022-24985Forms generated by JQueryForm.com before 2022-02-05 allows a…8.8
• CVE-2022-24986KDE KCron through 21.12.2 uses a temporary file in /tmp when…7.8
• CVE-2022-24988In galois_2p8 before 0.1.2, PrimitivePolynomialField::new ha…9.8
• CVE-2022-24989TerraMaster NAS through 4.2.30 allows remote WAN attackers t…9.8
• CVE-2022-2499An issue has been discovered in GitLab EE affecting all vers…4.3