← Back

Candidats

candidats

Vendor: Auieosoftware • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Auieosoftware
1Candidats
Nov 21, 2024
Nov 3, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
CandidATS version 3.0.0 allows an external attacker to read arbitrary files from the server. This is possible because the application is vulnerable to XXE.