Beveiligingsadvies

CVE-2022-42744

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-11-03 00:00:00
Laatst bijgewerkt 2025-05-05 13:04:12
Toegewezen door Fluid Attacks
CVSS-score 9.8
Status PUBLISHED

Beschrijving

CandidATS version 3.0.0 allows an external attacker to perform CRUD operations on the application databases. This is possible because the application does not correctly validate the entriesPerPage parameter against SQLi attacks.