Description
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required.
Critical · 9.8
CVE-2022-30357
EUVD-2022-52288GHSA-5h35-qf38-2835
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId a…
Published Oct 25, 2024 · Updated Oct 25, 2024 · Assigned by mitre