critical9.8
CVE-2022-30355
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters.
Impact
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ovaledge | Ovaledge | before 5.2.9 |