VULNERABILITY INTELLIGENCE

CVE-2022-30361

CVSS score5.3 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2024-10-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType. No authentication is required. The information disclosed is associated with the registered user ID, status, email address, role(s), user type, license type, and personal details such as first name, last name, gender, and user preferences.

Weakness classification

  • nvd@nist.gov: CWE-922
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-922

Primary references