Tcredence · Tcredence Analytics Ideal Wealth/Funds · CVE-2022-30025
**Name of the Vulnerable Software and Affected Versions**
tCredence Analytics iDEAL Wealth and Funds version 1.0
**Description**
The issue allows authenticated remote attackers to inject a payload via the `v` parameter in the "/Framewrk/Home.jsp" file using the POST method.
**Recommendations**
For version 1.0, avoid using the `v` parameter in the "/Framewrk/Home.jsp" file until the issue is resolved. As a temporary workaround, consider restricting access to the "/Framewrk/Home.jsp" file to minimize the risk of exploitation.