CVE-2026-22234

9.8CRITICAL

OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values of 'formid', and download or delete all

게시됨: 1/8/2026업데이트됨: 1/13/2026
NVD에서 보기MITRE에서 보기

설명

OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values of 'formid', and download or delete all user-uploaded files, or upload new files.

AI 분석AI 기반

참조