CVE-2022-3826: Huaxia ERP Retail Management list information disclosure

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-11-02 · updated 2026-06-17
Weakness: CWE-266

Description

A vulnerability was found in Huaxia ERP. It has been classified as problematic. This affects an unknown part of the file /depotHead/list of the component Retail Management. The manipulation of the argument search leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212793 was assigned to this vulnerability.

Affected products

Huaxia ERP: all versions

References

https://github.com/Ha0Liu/cveAdd/blob/developer/README.EN.yuequan.md
https://vuldb.com/?id.212793
https://github.com/Ha0Liu/cveAdd/blob/developer/README.EN.yuequan.md
https://vuldb.com/?id.212793

Get alerted when CVE-2022-3826 or the next vulnerability affects your stack