CVE-2022-30354

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is required. The information disclosed is associated with all registered user ID numbers.

• CWE-732

• https://cve.offsecguy.com/ovaledge/vulnerabilities/sensitive-data-exposure#cve-2022-30354Exploit, Third Party Advisory

Published

Oct 25, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3034When receiving an HTML email that specified to load an <code…4.3
• CVE-2022-30349siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripti…6.1
• CVE-2022-3035Cross-site Scripting (XSS) - Stored in GitHub repository sni…4.8
• CVE-2022-30350Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vu…7.5
• CVE-2022-30351PDFZorro PDFZorro Online r20220428 using TCPDF 6.2.5, despit…7.5
• CVE-2022-30352phpABook 0.9i is vulnerable to SQL Injection due to insuffic…9.8
• CVE-2022-30355OvalEdge 5.2.8.0 and earlier is affected by an Account Takeo…9.8
• CVE-2022-30356OvalEdge 5.2.8.0 and earlier is affected by a Privilege Esca…4.7
• CVE-2022-30357OvalEdge 5.2.8.0 and earlier is affected by an Account Takeo…8.8
• CVE-2022-30358OvalEdge 5.2.8.0 and earlier is affected by an Account Takeo…8.8
• CVE-2022-30359OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data…4.3
• CVE-2022-3036The Gettext override translations WordPress plugin before 2.…4.8