OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://cve.offsecguy.com/ovaledge/vulnerabilities/account-takeover#cve-2022-30355 | Third Party Advisory |
Configurations
History
28 Apr 2025, 17:31
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ovaledge ovaledge
Ovaledge |
|
| References | () https://cve.offsecguy.com/ovaledge/vulnerabilities/account-takeover#cve-2022-30355 - Third Party Advisory | |
| CPE | cpe:2.3:a:ovaledge:ovaledge:*:*:*:*:*:*:*:* |
25 Oct 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-25 16:15
Updated : 2025-04-28 17:31
NVD link : CVE-2022-30355
Mitre link : CVE-2022-30355
JSON object : View
Products Affected
ovaledge
- ovaledge
CWE
No CWE.