← Database

CVE-2022-24637

CRITICAL CVSS: 9.8 Published: 2022-03-18 Modified: 2026-06-17

Description

Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '

Affected Platforms

Openwebanalytics Open Web Analytics

Weakness Type

CWE-269

References