High severity8.8NVD Advisory· Published Nov 3, 2022· Updated Jun 17, 2026
CVE-2022-42751
CVE-2022-42751
Description
CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffers from CSRF. This allows to persuade an administrator to create a new account with administrative permissions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- CandidATS/CandidATSdescription
Patches
Vulnerability mechanics
References
2- fluidattacks.com/advisories/londra/nvdExploitThird Party Advisory
- candidats.netnvdBroken LinkProduct
News mentions
0No linked articles in our index yet.