CVE-2022-25510

Published March 11th, 2022

View on NVD ↗

CVSS v3

8.8

HIGH

CVSS v2

6.5

MEDIUM

Affected

PROJECT

Description

FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass authentication or escalate privileges.

FreeTAKTeam/FreeTakServer

Situational Awareness Server compatible with TAK clients

GitHub

923