Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Devexpress Subscribe
Filtered by product Asp.net Web Forms Controls
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-41479 1 Devexpress 1 Asp.net Web Forms Controls 2022-10-20 N/A 7.5 HIGH
The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects in the /DXR.axd?r= HTTP GET parameter. This leads to an Insecure Direct Object References (IDOR) vulnerability which allows attackers to access the application source code.