POST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not blocked for uses that are not logged in. If an unauthorized user is able to bypass other security filters they are able to post unauthorized data to the server because of CVE-2022-22965.
References
Link | Resource |
---|---|
https://service.gxsoftware.com/hc/en-us/articles/4717373636381-Vulnerability-in-Spring-core-Spring4Shell- | Vendor Advisory |
https://service.gxsoftware.com/hc/nl/articles/12208173122461 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2023-07-26T00:00:00
Updated: 2023-07-26T00:00:00
Reserved: 2022-10-24T00:00:00
Link: CVE-2022-43712
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-07-26T14:15:09.880
Modified: 2023-08-04T19:39:49.167
Link: CVE-2022-43712
JSON object: View
Redhat Information
No data.
CWE