CVE-2022-42749 in CandidATSinformación

Resumen

por MITRE • 2022-11-04

CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservar

2022-10-10

Divulgación

2022-11-04

Moderación

aceptado

Artículo

VDB-212914

CPE

listo

CWE

CWE-79 (confirmado)

CVSS

3.5 (VulDB)

EPSS

0.01071

KEV

Actividades

muy bajo

Fuentes

MITRE	https://www.cve.org/CVERecord?id=CVE-2022-42749
NVD	https://nvd.nist.gov/vuln/detail/CVE-2022-42749
CVE Details	https://www.cvedetails.com/cve/CVE-2022-42749/

◂ Anterior Visión De Conjunto Próximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!