AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-42751

HIGH · CVSS 8.8 EPSS 0.42%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-11-03 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2022-42751
Severity
HIGH
CVSS
8.8
EPSS
0.42%

Original NVD Description

CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffers from CSRF. This allows to persuade an administrator to create a new account with administrative permissions.