Description
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover.
High · 7.5
CVE-2022-40798
EUVD-2022-44064GHSA-73hh-p4j2-j7gj
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request wit…
Published Oct 19, 2022 · Updated May 8, 2025 · Assigned by mitre