Maarch RM vulnerabilities
3 known CVE vulnerabilities in Maarch RM, translated and rated.
- CVE-2022-37772High
The vulnerability in Maarch RM 2.8.3 is due to improper restriction of excessive authentication attempts, manifested by overly verbose responses from the application. An unauthenticated remote attacker could exploit this flaw to perform brute-force attacks on user accounts.
- CVE-2022-37774Medium
A broken access control vulnerability was found in Maarch RM 2.8.3. When previewing documents (PDF, email) from an archive, the application generates a URL containing an MD5 hash of the file, which is accessible without authentication.
- CVE-2022-37773Medium
An authenticated SQL Injection vulnerability in the statistics page (/statistics/retrieve) of Maarch RM 2.8, via the filter parameter, allows the complete disclosure of all databases.