High severity8.8NVD Advisory· Published Sep 19, 2022· Updated Jul 9, 2026
CVE-2022-38577
CVE-2022-38577
Description
ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate normal users to Administrators.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:processmaker:processmaker:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:processmaker:processmaker:*:*:*:*:*:*:*:*range: <3.5.4
- (no CPE)range: <3.5.4
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/168427/ProcessMaker-Privilege-Escalation.htmlnvdExploitThird Party AdvisoryVDB Entry
- drive.google.com/file/d/1iP9NYUkYEy_FGMpcnTkUWn8nGcqDT02_/viewnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.