high8.8
CVE-2022-30358
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and newPsw parameters.
Impact
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /user/updatePassword via the userId and newPsw parameters. Authentication is required.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ovaledge | Ovaledge | through 5.2.8 |