CVE-2022-36539

Katalog CVE

CVSS 7.5 · High EPSS 1,6%

Kerentanan Authorization Bypass Through User-Controlled Key pada eigen&wijzer ouderapp project eigen&wijzer ouderapp. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parents and children.

Rincian

Terbit di NVD

7 September 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-639: Authorization Bypass Through User-Controlled Key

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 74,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://apps.apple.com/nl/app/eigen-wijzer-ouderapp/id1331059326 product · release notes · advisory pihak ketiga
• https://github.com/Fopje/CVE-2022-36539 exploit · advisory pihak ketiga