CVE-2022-22835

PoC —

CVSS 3.1

6.5 medium

EPSS

14%p96

Published

Mar 10, 2022 (Mar 10, 2022)

Modified

Jun 17, 2026

Description

An issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the Test Trasformazione XSL functionality enabled can exploit a XXE vulnerability to read arbitrary files from the filesystem.

Vendors: overit
Products: geocall
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (14.5%)

In the news0 stories

No ingested article mentions this CVE yet.