← Back to browse · API

CVE-2022-36537

Severity
HIGH
CVSS
7.5
EPSS
0.95335
Risk score
58.37
CISA KEV
Yes
PoC
No
Published
2022-08-26
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2022-6491, GHSA-6278-2Q4M-CMF3
Products
ZK Framework:AuUploader, n/a:n/a n/a
Sources
cisa.gov CVE-2022-36537
euvd EUVD-2022-6491

Description

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader.

References