Description
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and newPsw parameters. Authentication is required.
High · 8.8
CVE-2022-30358
EUVD-2022-52289GHSA-rg65-7hjc-5cw2
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and…
Published Oct 25, 2024 · Updated Oct 29, 2024 · Assigned by mitre