Description
CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server. This is possible because the application is vulnerable to XXE.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | CandidATS | 3.0.0 | — |
Unscored
CVE-2022-42745
EUVD-2022-45808GHSA-5x8p-x36c-4gwr
CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server. This is possible because the application is vu…
Published Nov 3, 2022 · Updated Aug 3, 2024 · Assigned by Fluid Attacks