CVE-2022-45127

Name of the Vulnerable Software and Affected Versions Sewio’s Real-Time Location System (RTLS) Studio versions 2.0.0 through 2.6.2

Description The issue allows an attacker to execute arbitrary backup operations and cause a denial-of-service condition by exploiting a cross-site request forgery vulnerability in the backup services of the affected software.

Recommendations For versions 2.0.0 through 2.6.2, update to a version that fixes the cross-site request forgery vulnerability in the backup services to prevent arbitrary backup operations and denial-of-service conditions.