CVE-2022-42750

creationtimestamp| type| source ---|---|--- 2022-11-03 21:20:53+00:00| seen| https://t.me/cibsecurity/52526...

CVE-2022-42750

CVE-2022-42750 affects CandidATS version 3.0.0. The root cause is improper validation of user-uploaded files, enabling an external attacker to steal cookies from arbitrary users. Multiple trusted sources (Red Hat advisory, NVD entry, and related vendor risk disclosures) corroborate this, with CVS...