POST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not blocked for uses that are not logged in. If an unauthorized user is able to bypass other security filters they are able to post unauthorized data to the server because of CVE-2022-22965.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-07-26T00:00:00
Updated: 2024-08-03T13:40:06.173Z
Reserved: 2022-10-24T00:00:00
Link: CVE-2022-43712
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2023-07-26T14:15:09.880
Modified: 2023-08-04T19:39:49.167
Link: CVE-2022-43712
Redhat
No data.