CVE-2022-30356

OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserrole via the userid and role parameters . Authentication is required with OEADMIN role privilege...

OvalEdge 安全漏洞

OvalEdge is a solution from US-based OvalEdge that helps users create, manage and use data from a variety of sources through AI and human intelligence. A security vulnerability exists in OvalEdge version 5.2.8.0 and earlier, which stems from a POST request to /profile/updateProfile via the userId...

CVE-2022-30357

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required...

CVE-2022-30357

OvalEdge 5.2.8.0 and earlier are affected by an Account Takeover vulnerability triggered by a POST to /profile/updateProfile using the userId and email parameters. Authentication is required. The Red Hat/CNNVD/CVE entries repeat this finding; NVD lists CVSS v3.1 scores with high/critical impact (...

OvalEdge 安全漏洞

OvalEdge is a solution from US-based OvalEdge that helps users create, manage, and use data from a variety of sources through AI and human intelligence. A security vulnerability exists in OvalEdge version 5.2.8.0 and earlier, which stems from a POST request to /user/updatePassword via the userId...

OvalEdge 安全漏洞

OvalEdge is a solution from US-based OvalEdge that helps users create, manage and use data from a variety of sources through AI and human intelligence. A security vulnerability exists in OvalEdge version 5.2.8.0 and earlier, which originates from a GET request to /user/getUserType and can result ...

CVE-2022-30358

CVE-2022-30358 affects OvalEdge 5.2.8.0 and earlier. A vulnerability in the POST /user/updatePassword endpoint (parameters: userId, newPsw) allows account takeover; authentication is required. Connected sources (Red Hat, NVD, CVE listing, CNNVD) corroborate this description. No remediation detail...

PT-2024-11557 · Ovaledge · Ovaledge

Name of the Vulnerable Software and Affected Versions: OvalEdge versions 5.2.8.0 and earlier Description: The issue is a Sensitive Data Exposure vulnerability that can be exploited via a GET request to "/user/getUserList". Authentication is required to exploit this issue. The disclosed informatio...