CVE-2022-22835

An issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XXE vulnerability to read arbitrary files from the filesystem.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2022-03-10

Last modified

2024-09-18

Weaknesses

CWE-611

Affected products

• Geocall (Overit)

References

• https://labs.yarix.com/2022/03/overit-framework-xslt-injection-and-xxe-cve-2022-22834-cve-2022-22835/
• https://labs.yarix.com/advisories/cve-2022-22835/
• https://overit.us/products/geocall/
• https://www.overit.ai/product/nextgen-fsm/