PT-2023-10215 · Dronfelipe+1 · Dronfelipe

Dronfelipe + 1 · Publicado 2023-01-11 · Atualizado 2024-05-17 · CVE-2015-10036

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Média

Vetor base

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions kylebebak dronfelipe (affected versions not specified)

Description A critical issue has been identified, affecting an unknown functionality, which can be manipulated to lead to sql injection.

Recommendations Apply the patch 87405b74fe651892d79d0dff62ed17a7eaef6a60 to fix this issue.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2015-10036

Produtos afetados

Dronfelipe

Referências · 5

• https://github.com/kylebebak/dronfelipe/commit/87405b74fe651892d79d0dff62ed17a7eaef6a60 · Correção
• https://vuldb.com/?ctiid.217951 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-10036 · Nota de Segurança
• https://vuldb.com/?id.217951 · Nota
• https://t.me/cvenotify/42315 · Publicação no Telegram