What’s Vulnerable › Vulnerabilities

CVE-2022-27247

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-05-13 · updated 2026-06-17
• Weakness: CWE-639

Description

onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any customer (e.g., data of birth, full address, mail information, and phone number) via GastKont Insecure Direct Object Reference.

Affected products

• Cdsoft Winhotel.Mx: 2021

References

• https://myses.de/#about
• https://myses.de/pdf/CVE2022-27247.pdf
• https://myses.de/#about
• https://myses.de/pdf/CVE2022-27247.pdf

Get alerted when CVE-2022-27247 or the next vulnerability affects your stack