CVE-2022-27247

5.3 mediumEPSS 1.0%

Medium (5.3) in cdsoft winhotel.mx. EPSS 1.0% chance of exploitation in the next 30 days.

onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer (e.g., data of birth, full address, mail information, and phone number) via GastKont Insecure Direct Object Reference.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2022-05-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cdsoft:winhotel.mx

References

https://myses.de/#about
https://myses.de/pdf/CVE2022-27247.pdf
https://myses.de/#about
https://myses.de/pdf/CVE2022-27247.pdf

Check your stack JSON