← Database

CVE-2022-40798

HIGH CVSS: 7.5 Published: 2022-10-19 Modified: 2026-06-17

Description

OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover.

Affected Platforms

Ocomon Project Ocomon

Weakness Type

NVD-CWE-Other, CWE-284

References