CVE-2026-75106 | BDVDB-2026-360730 Detail
OpnFormOpnForm
Description#
OpnForm derives editable-submission secrets from sequential row identifiers using Hashids with an empty default salt, allowing unauthenticated attackers to compute hashes for any submission. Attackers can read other respondents' full submission data through the submission-fetch endpoint or overwrite submissions by supplying predicted hashes to the answer endpoint.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact none. Attack vector: network.
Weaknesses#
- CWE-340 Generation of Predictable Numbers or Identifiers
References#
- https://github.com/OpnForm/OpnForm/issues/1259
- https://github.com/OpnForm/OpnForm
- https://github.com/OpnForm/OpnForm/commit/6c67ff0a9bc0ac27ae26b32b8e108a176f8161b1
- https://github.com/OpnForm/OpnForm/releases/tag/v2.0.2
- https://www.vulncheck.com/advisories/opnform-editable-submission-secret-derivation-via-empty-hashids-salt
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.