CVE-2022-43712

POST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not blocked for uses that are not logged in

published July 26, 2023

CVSS
—
EPSS
0%
Percentile
40.0
In the wild
Unconfirmed
What it is

POST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not blocked for uses that are not logged in. If an unauthorized user is able to bypass other security filters they are able to post unauthorized data to the server because of CVE-2022-22965.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00473 · 40.0th percentile
Published
2023-07-26T00:00Z
EPSS history
Timeline
  • 26 JUL 00:00Z
    POST requests to /web/mvc in GX Software XperienCentral version 10.36.0 and earlier were not blocked for uses that are not logged in
    cvelistv5