cve/2022/CVE-2022-40798.md
2024-06-18 02:51:15 +02:00

775 B

CVE-2022-40798

Description

OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover.

POC

Reference

Github