CVE-2022-30354: Ovaledge

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is required. The information disclosed is associated with all registered user ID numbers.

Affected products

• Ovaledge Ovaledge: before 5.2.9 (fixed in 5.2.9)

Published 2024-10-25. Last modified 2026-06-17.