A vulnerability, which was classified as critical, has been found in m0ver bible-online. Affected by this issue is the function query of the file src/main/java/custom/application/search.java of the component Search Handler. The manipulation leads to sql injection. The name of the patch is 6ef0aabfb2d4ccd53fcaa9707781303af357410e. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215444.
References
Link | Resource |
---|---|
https://github.com/m0ver/bible-online/commit/6ef0aabfb2d4ccd53fcaa9707781303af357410e | Patch Third Party Advisory |
https://vuldb.com/?id.215444 | Permissions Required Third Party Advisory |
https://github.com/m0ver/bible-online/commit/6ef0aabfb2d4ccd53fcaa9707781303af357410e | Patch Third Party Advisory |
https://vuldb.com/?id.215444 | Permissions Required Third Party Advisory |
Configurations
History
21 Nov 2024, 07:35
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
References | () https://github.com/m0ver/bible-online/commit/6ef0aabfb2d4ccd53fcaa9707781303af357410e - Patch, Third Party Advisory | |
References | () https://vuldb.com/?id.215444 - Permissions Required, Third Party Advisory |
19 Dec 2022, 16:36
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-12-13 18:15
Updated : 2024-11-21 07:35
NVD link : CVE-2022-4454
Mitre link : CVE-2022-4454
CVE.ORG link : CVE-2022-4454
JSON object : View
Products Affected
m0ver
- bible-online