CVE-2022-40798
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to accoun…
Published: 2022-10-19 · CVSS: 7.5 · CVSS 3.1
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7