Security Advisory

CVE-2022-38577

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-09-19 15:45:54

Last updated 2026-07-09 00:20:55

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate normal users to Administrators.

← Browse all CVEs View on cve.org ↗