| |
Vulnerability CVE-2022-42751
Published: 2022-11-03
| Description: |
CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffers from CSRF. This allows to persuade an administrator to create a new account with administrative permissions. |
References: |
https://fluidattacks.com/advisories/londra/
https://candidats.net/
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
