CVEvulnerability

CVE-2022-3826

6.5 MEDIUM Published 2022-11-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-11-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-266

Description

A vulnerability was found in Huaxia ERP. It has been classified as problematic. This affects an unknown part of the file /depotHead/list of the component Retail Management. The manipulation of the argument search leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212793 was assigned to this vulnerability.

Affected configurations

• huaxiaerp huaxia erp

Related

Weakness · CWE (1)

  • CWE-266 Incorrect Privilege Assignment weakness

References