CVE-2022-38400
CVE-2022-38400
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
08 Sep 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Mailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user input data by having a use of the product to access a specially crafted URL.
Affected products
SYNCK GRAPHICA · Mailform Pro CGIWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →