https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:11:34 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-86338 cnvd-2022-86338 https://cve.radiocsirt.org/vuln/cnvd-2022-86338 https://cve.radiocsirt.org/vuln/euvd-2026-235253 EUVD-2026-235253 https://cve.radiocsirt.org/vuln/euvd-2026-235253 https://cve.radiocsirt.org/vuln/fkie_cve-2022-3589 <p>An API Endpoint used by Miele&#39;s &#34;AppWash&#34; MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP request sent to the API. Reading or changing the password of another user was not possible, thus no impact to Availability.</p> <p>An API Endpoint used by Miele&#39;s &#34;AppWash&#34; MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP request sent to the API. Reading or changing the password of another user was not possible, thus no impact to Availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-3589 https://cve.radiocsirt.org/vuln/ghsa-cj87-vv3f-mmxj <p>An API Endpoint used by Miele&#39;s &#34;AppWash&#34; MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP request sent to the API. Reading or changing the password of another user was not possible, thus no impact to Availability.</p> <p>An API Endpoint used by Miele&#39;s &#34;AppWash&#34; MobileApp in all versions was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP request sent to the API. Reading or changing the password of another user was not possible, thus no impact to Availability.</p> https://cve.radiocsirt.org/vuln/ghsa-cj87-vv3f-mmxj https://cve.radiocsirt.org/vuln/gsd-2022-3589 gsd-2022-3589 https://cve.radiocsirt.org/vuln/gsd-2022-3589 https://cve.radiocsirt.org/vuln/vde-2022-052 <p>Up until October 5th, 2022 the ease2pay API used by Miele&#39;s &#34;AppWash&#34; MobileApp was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP request sent to the API. Reading or changing the password of another user was not possible, thus no impact to Availability.</p> <p>Up until October 5th, 2022 the ease2pay API used by Miele&#39;s &#34;AppWash&#34; MobileApp was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small part of a HTTP request sent to the API. Reading or changing the password of another user was not possible, thus no impact to Availability.</p> https://cve.radiocsirt.org/vuln/vde-2022-052