PT-2023-10008 · Oclc · Oclc-Research Oaicat

Ward Van Wanrooij · Published 2023-02-20 · Updated 2024-05-17 · CVE-2013-10019

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OCLC-Research OAICat version 1.5.61

Description A critical issue affects some unknown processing, leading to sql injection. The attack may be initiated remotely.

Recommendations For OCLC-Research OAICat version 1.5.61, upgrade to version 1.5.62 to address this issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2013-10019

Affected Products

Oclc-Research Oaicat

References · 8

• https://github.com/OCLC-Research/oaicat/commit/6cc65501869fa663bcd24a70b63f41f5cfe6b3e1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2013-10019 · Security Note
• https://oaicat.googlecode.com/files/oaicat-1.5.62.tar.gz · Patch
• https://code.google.com/archive/p/oaicat/issues/7 · Vendor Advisory
• https://t.me/cibsecurity/58518 · Telegram Post
• https://t.me/cvenotify/44674 · Telegram Post
• https://vuldb.com/?ctiid.221489 · Note
• https://vuldb.com/?id.221489 · Note