← Back to CVE List
CVE-2022-40798
OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt