{"dataType": "CVE_RECORD", "dataVersion": "5.0", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-42748", "assignerOrgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "assignerShortName": "Fluid Attacks", "dateUpdated": "2022-12-05T12:11:34.342Z", "dateReserved": "2022-10-10T00:00:00", "datePublished": "2022-11-03T00:00:00"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "CandidATS", "vendor": "n/a", "versions": [{"status": "affected", "version": "3.0.0"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks.</p>"}], "value": "CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks.\n\n"}], "problemTypes": [{"descriptions": [{"description": "Reflected cross-site scripting (XSS)", "lang": "en"}]}], "providerMetadata": {"orgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "shortName": "Fluid Attacks", "dateUpdated": "2022-12-05T12:11:34.342Z"}, "references": [{"url": "https://candidats.net/"}, {"url": "https://fluidattacks.com/advisories/modestep/"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:auieo:candidats:3.0.0:-:*:*:*:*:*:*", "matchCriteriaId": "49FA43A5-7FB5-4E3A-8530-06C2BC31B078", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks.\n\n"}, {"lang": "es", "value": "CandidATS versi\u00f3n 3.0.0 en 'sortDirection' del recurso 'ajax.php', permite que un atacante externo robe la cookie de usuarios arbitrarios. Esto es posible porque la aplicaci\u00f3n no valida adecuadamente la entrada del usuario contra ataques XSS."}], "id": "CVE-2022-42748", "lastModified": "2023-11-07T03:53:28.790", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-11-03T20:15:32.727", "references": [{"source": "help@fluidattacks.com", "tags": ["Product"], "url": "https://candidats.net/"}, {"source": "help@fluidattacks.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://fluidattacks.com/advisories/modestep/"}], "sourceIdentifier": "help@fluidattacks.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}