Vulnerabilities > Devexpress > ASP NET WEB Forms Controls

DATE CVE VULNERABILITY TITLE RISK
2022-10-18 CVE-2022-41479 Authorization Bypass Through User-Controlled Key vulnerability in Devexpress Asp.Net web Forms Controls 19.2.3
The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects in the /DXR.axd?r= HTTP GET parameter.
network
low complexity
devexpress CWE-639
7.5