CVE-2022-3826

MEDIUM

Huaxia ERP - Information Disclosure via Retail Management Search Parameter

Title source: llm
STIX 2.1

Description

A vulnerability was found in Huaxia ERP. It has been classified as problematic. This affects an unknown part of the file /depotHead/list of the component Retail Management. The manipulation of the argument search leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212793 was assigned to this vulnerability.

References (2)

Core 2
Core References
Permissions Required, Third Party Advisory
https://vuldb.com/?id.212793

Scores

CVSS v3 4.3
EPSS 0.0059
EPSS Percentile 43.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-266
Status published
Products (1)
huaxiaerp/huaxia_erp
Published Nov 02, 2022
Tracked Since Feb 18, 2026