CVE-2022-31884

MEDIUM 6.5CVE-2022-31884 · Published 28/06/2022 · updated 17/06/2026

In short

CVE-2022-31884 is a MEDIUM (CVSS 6.5) vulnerability affecting marval msm (marvalglobal).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
marval msm marvalglobal	`= 14.19.0.12476`	No fix yet

Description

Marval MSM v14.19.0.12476 has an Improper Access Control vulnerability which allows a low privilege user to delete other users API Keys including high privilege and the Administrator users API Keys.

References

cyber-guy.gitbook.io/cyber-guy/pocs/marval-msm/unauthorized-delete-add-api-users-api-keys · Exploit
drive.google.com/drive/folders/1lFM9cVUqTlKyDI2azmI1rIF4HoZBt_4i · Broken Link
marvalglobal.com · Product

More vulnerabilities in marval msm

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

marval msm

marvalglobal

= 14.19.0.12476

No fix yet

More vulnerabilities in marval msm

See all →