| |
Vulnerability CVE-2022-42750
Published: 2022-11-03
| Description: |
CandidATS version 3.0.0 allows an external attacker to steal the cookie of arbitrary users. This is possible because the application does not correctly validate the files uploaded by the user. |
References: |
https://candidats.net/
https://fluidattacks.com/advisories/castles/
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
