CVE-2022-31883: Marvalglobal Marval Msm

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low privilege user is able to see other users API Keys including the Admins API Keys.

Affected products

• Marvalglobal Marval Msm: version 14.19.0.12476 only

Published 2022-06-28. Last modified 2026-06-17.