Description
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required.
Critical · 9.8
CVE-2022-30355
EUVD-2022-52286GHSA-5828-hc43-9j7x
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId a…
Published Oct 25, 2024 · Updated Oct 25, 2024 · Assigned by mitre