CVE-2022-22831: Servisnet Tessa

Critical severity, CVSS 9.8. EPSS: 11.4% chance of exploitation in the next 30 days.

An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Authorization HTTP header.

Affected products

• Servisnet Tessa: version 0.0.2 only

Published 2022-02-06. Last modified 2026-06-17.