Xxe

2022-11-0320:15:00

PRIOn knowledge base

www.prio-n.com

candidats version 3.0.0

xxe vulnerability

arbitrary file read

server

0.002 Low

EPSS

Percentile

56.5%

JSON

CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server. This is possible because the application is vulnerable to XXE.

CPENameOperatorVersion
candidatseq3.0.0

CPE	Name	Operator	Version
	candidats	eq	3.0.0

References

candidats.net/

fluidattacks.com/advisories/jcole/

0.002 Low

EPSS

Percentile

56.5%

JSON

Related for PRION:CVE-2022-42745