high7.5
CVE-2022-40798
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control.
Impact
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ocomon Project | Ocomon | before 4.0 Version 4.0 |