PT-2022-15702 · Overit · Overit Geocall

Davide Bassetto · Published 2022-03-07 · Updated 2025-11-06 · CVE-2022-22834

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OverIT Geocall versions prior to 8.0

Description An issue was discovered that allows an authenticated user with the Test Trasformazione XSL functionality enabled to exploit a XSLT Injection vulnerability. This could allow attackers to achieve remote code execution.

Recommendations For versions prior to 8.0, update to version 8.0 or later to resolve the issue. As a temporary workaround, consider disabling the Test Trasformazione XSL functionality to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-91

Related Identifiers

CVE-2022-22834

Affected Products

Overit Geocall

References · 9

• 🔥 https://labs.yarix.com/2022/03/overit-framework-xslt-injection-and-xxe-cve-2022-22834-cve-2022-22835 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-22834 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22834 · Vendor Advisory
• https://overit.us/products/geocall · Vendor Advisory
• https://overit.ai/product/nextgen-fsm · Note
• https://t.me/cvenotify/95149 · Telegram Post
• https://t.me/tmfeed/271139 · Telegram Post
• https://t.me/opennews/14332 · Telegram Post
• https://labs.yarix.com/advisories/cve-2022-22834 · Note