CVE-2022-22834

Description

References

• labs.yarix.com/2022/03/overit-framework-xslt-injection-and-xxe-cve-2022-22834-cve-2022-22835 · Exploit
• labs.yarix.com/advisories/cve-2022-22834 · Third Party Advisory
• overit.us/products/geocall · Product
• overit.ai/product/nextgen-fsm

geocall 的其他漏洞

• CVE-2022-22835中危 6.5An issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the Test Trasformazione XSL functionality enable…
• CVE-2019-5891严重 9.8An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an …
• CVE-2019-5890高危 8.8An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user…
• CVE-2019-5889高危 7.5An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977.
• CVE-2019-5888中危 6.1Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977.