Ocomon vulnerabilities

3 known vulnerabilities in Ocomon from Ocomon Project. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Ocomon: Inclusion of Functionality from Untrusted Control Sphere

  CVE-2023-33559Oct 26, 2023Ocomon Project

  A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying a crafted PHP file.

• 7.5 High severity

  Ocomon: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2023-33558Oct 26, 2023Ocomon Project

  An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive information such as e-mails and usernames.

• 7.5 High severity

  Ocomon: Improper Access Control

  CVE-2022-40798Oct 19, 2022Ocomon ProjectEPSS 1.02%

  OcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain the real email, sending the same request with correct email its possible to account takeover.