Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 03:33:51 +0000 cnvd-2022-86392 https://cve.radiocsirt.org/vuln/cnvd-2022-86392 cnvd-2022-86392 https://cve.radiocsirt.org/vuln/cnvd-2022-86392 EUVD-2026-334632 https://cve.radiocsirt.org/vuln/euvd-2026-334632 EUVD-2026-334632 https://cve.radiocsirt.org/vuln/euvd-2026-334632 fkie_cve-2022-37774 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37774 <p>There is a broken access control vulnerability in the Maarch RM 2.8.3 solution. When accessing some specific document (pdf, email) from an archive, a preview is proposed by the application. This preview generates a URL including an md5 hash of the file accessed. The document&#39;s URL (https://{url}/tmp/{MD5 hash of the document}) is then accessible without authentication.</p> <p>There is a broken access control vulnerability in the Maarch RM 2.8.3 solution. When accessing some specific document (pdf, email) from an archive, a preview is proposed by the application. This preview generates a URL including an md5 hash of the file accessed. The document&#39;s URL (https://{url}/tmp/{MD5 hash of the document}) is then accessible without authentication.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-37774 GHSA-fcjq-9fhq-v247 https://cve.radiocsirt.org/vuln/ghsa-fcjq-9fhq-v247 <p>There is a broken access control vulnerability in the Maarch RM 2.8.3 solution. When accessing some specific document (pdf, email) from an archive, a preview is proposed by the application. This preview generates a URL including an md5 hash of the file accessed. The document&#39;s URL (https://{url}/tmp/{MD5 hash of the document}) is then accessible without authentication.</p> <p>There is a broken access control vulnerability in the Maarch RM 2.8.3 solution. When accessing some specific document (pdf, email) from an archive, a preview is proposed by the application. This preview generates a URL including an md5 hash of the file accessed. The document&#39;s URL (https://{url}/tmp/{MD5 hash of the document}) is then accessible without authentication.</p> https://cve.radiocsirt.org/vuln/ghsa-fcjq-9fhq-v247 gsd-2022-37774 https://cve.radiocsirt.org/vuln/gsd-2022-37774 gsd-2022-37774 https://cve.radiocsirt.org/vuln/gsd-2022-37774