{"api_version":"1","generated_at":"2026-07-23T11:42:41+00:00","cve":"CVE-2022-42747","urls":{"html":"https://cve.report/CVE-2022-42747","api":"https://cve.report/api/cve/CVE-2022-42747.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2022-42747","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2022-42747"},"summary":{"title":"CVE-2022-42747","description":"CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks.","state":"PUBLIC","assigner":"help@fluidattacks.com","published_at":"2022-11-03 20:15:00","updated_at":"2023-11-07 03:53:00"},"problem_types":["CWE-79"],"metrics":[],"references":[{"url":"https://candidats.net/","name":"https://candidats.net/","refsource":"MISC","tags":[],"title":"Home - Candid ATS","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://fluidattacks.com/advisories/modestep/","name":"https://fluidattacks.com/advisories/modestep/","refsource":"MISC","tags":[],"title":"Multiple XSS in CandidATS leads to account takeover | Advisories | Fluid Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://fluidattacks.com/advisories/jcole/","name":"https://fluidattacks.com/advisories/jcole/","refsource":"MISC","tags":[],"title":"Local File Read in CandidATS 3.0.0 via XXE | Advisories | Fluid Attacks","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42747","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42747","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2022","cve_id":"42747","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"auieo","cpe5":"candidats","cpe6":"3.0.0","cpe7":"-","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2022-42747","ASSIGNER":"help@fluidattacks.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is possible because the application application does not properly validate user input against XSS attacks."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Reflected cross-site scripting (XSS)"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"CandidATS","version":{"version_data":[{"version_value":"3.0.0","version_affected":"="}]}}]}}]}},"references":{"reference_data":[{"url":"https://candidats.net/","refsource":"MISC","name":"https://candidats.net/"},{"url":"https://fluidattacks.com/advisories/modestep/","refsource":"MISC","name":"https://fluidattacks.com/advisories/modestep/"}]},"generator":{"engine":"Vulnogram 0.1.0-dev"},"source":{"discovery":"UNKNOWN"}},"nvd":{"publishedDate":"2022-11-03 20:15:00","lastModifiedDate":"2023-11-07 03:53:00","problem_types":["CWE-79"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.7}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:auieo:candidats:3.0.0:-:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}