What is GHSA-6cwx-42hw-w69c?

GHSA-6cwx-42hw-w69c is a security advisory published by GitHub Security Advisories with Medium severity. FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint

Which CVE IDs does GHSA-6cwx-42hw-w69c cover?

GHSA-6cwx-42hw-w69c covers the following CVE IDs: CVE-2025-55797. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-6cwx-42hw-w69c?

GHSA-6cwx-42hw-w69c affects 1 product, including: nuget/FormCMS:\u003c= 0.5.4.

GHSA-6cwx-42hw-w69cMedium

FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint

Vendor

GitHub Security Advisories

Published

September 30, 2025

Last Modified

September 30, 2025

🔗 CVE IDs covered (1)

CVE-2025-55797 →

📋 Description

An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed.

🎯 Affected products1

nuget/FormCMS:<= 0.5.4

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2025-55797
https://github.com/FormCms
https://github.com/FormCms/FormCms
https://github.com/KKC73/me/tree/main/CVE-2025-55797
https://github.com/formcms/formcms/issues/19
https://github.com/advisories/GHSA-6cwx-42hw-w69c