← Database

CVE-2022-25510

HIGH CVSS: 8.8 Published: 2022-03-11 Modified: 2026-06-17

Description

FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass authentication or escalate privileges.

Affected Platforms

Freetakserver-Ui Project Freetakserver-Ui

Weakness Type

CWE-798

References