CVE-2022-43326

creationtimestamp| type| source ---|---|--- 2022-11-29 07:28:54+00:00| seen| https://t.me/cibsecurity/53636 2025-04-25 17:07:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13475...

CVE-2022-43326

CVE-2022-43326 affects Telos Alliance Omnia MPX Node versions 1.0.0–1.4.[*], where an insecure direct object reference in the password reset feature lets an attacker arbitrarily change passwords for any user, including Administrators. The root cause is IDOR in the password reset flow. Impact is h...