CVE-2022-30361

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserType. No authentication is required. The information disclosed is associated with the registered user ID, status, email address, role(s), user type, license type, and personal details such as first name, last name, gender, and user preferences.

• CWE-922
• CWE-922

• https://cve.offsecguy.com/ovaledge/vulnerabilities/sensitive-data-exposure#cve-2022-30361Exploit, Third Party Advisory

Published

Oct 25, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30356OvalEdge 5.2.8.0 and earlier is affected by a Privilege Esca…4.7
• CVE-2022-30357OvalEdge 5.2.8.0 and earlier is affected by an Account Takeo…8.8
• CVE-2022-30358OvalEdge 5.2.8.0 and earlier is affected by an Account Takeo…8.8
• CVE-2022-30359OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data…4.3
• CVE-2022-3036The Gettext override translations WordPress plugin before 2.…4.8
• CVE-2022-30360OvalEdge 5.2.8.0 and earlier is affected by multiple Stored …6.4
• CVE-2022-30367Air Cargo Management System v1.0 is vulnerable to file delet…6.5
• CVE-2022-3037Use After Free in GitHub repository vim/vim prior to 9.0.032…7.8
• CVE-2022-30370Air Cargo Management System 1.0 is vulnerable to SQL Injecti…9.8
• CVE-2022-30371Air Cargo Management System 1.0 is vulnerable to SQL Injecti…7.2
• CVE-2022-30372Air Cargo Management System 1.0 is vulnerable to SQL Injecti…7.2
• CVE-2022-30373Air Cargo Management System 1.0 is vulnerable to SQL Injecti…7.2