CVE-2022-42745

7.5 highEPSS 1.0%

High (7.5) in auieosoftware candidats. EPSS 1.0% chance of exploitation in the next 30 days.

CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server. This is possible because the application is vulnerable to XXE.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-611
Published: 2022-11-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

auieosoftware:candidats

References

https://candidats.net/
https://fluidattacks.com/advisories/jcole/
https://candidats.net/
https://fluidattacks.com/advisories/jcole/

Check your stack JSON