Lucene search
PRIOn knowledge basePRION:CVE-2022-41479HistoryOct 18, 2022 - 2:15 p.m.
Spoofing
2022-10-1814:15:00
PRIOn knowledge base
www.prio-n.com
7
devexpress asp.net idor vulnerability
0.002 Low
EPSS
Percentile
58.7%
The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects in the /DXR.axd?r= HTTP GET parameter. This leads to an Insecure Direct Object References (IDOR) vulnerability which allows attackers to access the application source code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| asp.net_web_forms_controls | eq | 19.2.3 |
Related
cve
cve
CVE-2022-41479
2022-10-18 14:15:09
cvelist
cvelist
CVE-2022-41479
2022-10-18 00:00:00
nvd
nvd
CVE-2022-41479
2022-10-18 14:15:09