CVE-2022-22834

HIGH 8.8CVE-2022-22834 · Published 10/03/2022 · updated 17/06/2026

In short

CVE-2022-22834 is a HIGH (CVSS 8.8) vulnerability affecting geocall (overit).
Chance of exploitation in the next 30 days (EPSS): 3.5%, higher than 89.1% of all vulnerabilities.
Fix: update to 8.0 or later.

Package	Affected versions	Patched versions
geocall overit	`< 8.0`	`8.0`

Description

An issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XSLT Injection vulnerability. Attackers could exploit this issue to achieve remote code execution.

References

labs.yarix.com/2022/03/overit-framework-xslt-injection-and-xxe-cve-2022-22834-cve-2022-22835 · Exploit
labs.yarix.com/advisories/cve-2022-22834 · Third Party Advisory
overit.us/products/geocall · Product
overit.ai/product/nextgen-fsm

More vulnerabilities in geocall

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

geocall

overit

< 8.0

8.0

More vulnerabilities in geocall

See all →