CVE-2022-30495

2022-05-2616:32:46

mitre

www.cve.org

automotive shop management

idor

broken access control

AI Score

9.6

Confidence

High

EPSS

0.004

Percentile

74.3%

JSON

In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin password(vertical privilege escalation)

References

github.com/nsparker1337/OpenSource/blob/main/exploit_idor_asms.md