CVE-2022-25510

FreeTAKTeam/FreeTakServer

on github

Published

March 11, 2022

Severity

CVSS v3:

8.8 HIGH

CVSS v2:

6.5 MEDIUM

Description

FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass authentication or escalate privileges.

References

https://github.com/FreeTAKTeam/FreeTakServer/issues/292

Configurations

CPE23	Version Start	Version End	Exact Version
cpe:2.3:a:freetakserver-ui_project:freetakserver-ui:1.9.8:::::::*	n/a	n/a	1.9.8

External Links

NVD - CVE-2022-25510