CVE-2022-42751
Assigner: Fluid Attacks
Published: 2022-11-03T00:00:00
State: PUBLISHED
descriptions: value: CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffers from CSRF. This allows to persuade an administrator to create a new account with administrative permissions.
affected: vendor: n/a
product: CandidATS
versions: version: 3.0.0
status: affected
problemTypes: descriptions: type: text
description: Cross-site request forgery (CSRF)