Security Advisory
CVE-2022-30355
9.8
CRITICAL
Vulnerability Description
OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required.
Published Date
October 25, 2024
Official Source
NIST NVD Advisory