TI-2022-20763 CVE-2022-42745 · GHSA-5x8p-x36c-4gwr
XML external entity injection in CandidATS
Priority LOW 35
CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server.
Auieosoftware
Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Auieosoftware records in CISA KEVNo Auieosoftware vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record