CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. See the original NVD description below for full technical details.
CVE
CVE-2022-42751
Severity
HIGH
CVSS
8.8
EPSS
0.42%
Original NVD Description
CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffers from CSRF. This allows to persuade an administrator to create a new account with administrative permissions.
Related CVEs
Other vulnerabilities affecting the same vendor(s)