CVE-2022-42745

2022-11-0300:00:00

Fluid Attacks

www.cve.org

candidats

version 3.0.0

xxe vulnerability

arbitrary file read

server

0.002 Low

EPSS

Percentile

56.5%

JSON

CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server. This is possible because the application is vulnerable to XXE.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "CandidATS",
    "versions": [
      {
        "version": "3.0.0",
        "status": "affected"
      }
    ]
  }
]

References

candidats.net/

fluidattacks.com/advisories/jcole/

0.002 Low

EPSS

Percentile

56.5%

JSON

Related for CVELIST:CVE-2022-42745