PT-2023-10204 · Unknown · Luelista Miniconf

Published 2023-01-07 · Updated 2024-05-17 · CVE-2015-10025

Positive Technologies (AI Summary)

CVSS v2.0

2.3

Low

Base vector

AV:A/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions luelista miniConf versions up to 1.7.6

Description A vulnerability has been found in the component URL Scanning, affecting an unknown functionality of the file miniConf/MessageView.cs. The manipulation leads to denial of service.

Recommendations For luelista miniConf versions up to 1.7.6, upgrade to version 1.7.7 or 1.8.0 to address this issue.

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2015-10025

Affected Products

Luelista Miniconf

References · 5

• https://github.com/luelista/miniConf/commit/c06c2e5116c306e4e1bc79779f0eda2d1182f655 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-10025 · Security Note
• https://vuldb.com/?id.217615 · Note
• https://t.me/cvenotify/41489 · Telegram Post
• https://vuldb.com/?ctiid.217615 · Note