Vulnerability Details CVE-2022-42750
CandidATS version 3.0.0 allows an external attacker to steal the cookie of arbitrary users. This is possible because the application does not correctly validate the files uploaded by the user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 57.2%
CVSS Severity
CVSS v3 Score 8.8
References