CVE-2022-42751

HIGH 8.8CVE-2022-42751 · Published 03/11/2022 · updated 17/06/2026

In short

CVE-2022-42751 is a HIGH (CVSS 8.8) vulnerability affecting candidats (auieo).
Chance of exploitation in the next 30 days (EPSS): 0.54%, higher than 45.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
candidats auieo	`= 3.0.0`	No fix yet

Description

CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffers from CSRF. This allows to persuade an administrator to create a new account with administrative permissions.

References

candidats.net · Broken Link
fluidattacks.com/advisories/londra · Exploit

More vulnerabilities in candidats

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

candidats

auieo

= 3.0.0

No fix yet

More vulnerabilities in candidats

See all →