PT-2023-10807 · Petermu · Nodebatis

Petermu · Published 2023-01-06 · Updated 2024-05-17 · CVE-2018-25066

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PeterMu nodebatis versions up to 2.1.x

Description A critical issue has been found, affecting an unknown function, which leads to sql injection. Upgrading to version 2.2.0 can address this issue.

Recommendations For versions up to 2.1.x, upgrade to version 2.2.0 to address the issue. As a temporary workaround, consider restricting access to the affected component until the upgrade is applied.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2018-25066

GHSA-8PH8-9Q2J-C3RQ

Affected Products

Nodebatis

References · 10

• https://github.com/PeterMu/nodebatis/releases/tag/v2.2.0 · Patch
• https://github.com/PeterMu/nodebatis/commit/6629ff5b7e3d62ad8319007a54589ec1f62c7c35 · Patch
• https://osv.dev/vulnerability/CVE-2018-25066 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8ph8-9q2j-c3rq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-25066 · Security Note
• https://github.com/PeterMu/nodebatis · Note
• https://t.me/cvenotify/41391 · Telegram Post
• https://vuldb.com/?ctiid.217554 · Note
• https://vuldb.com/?id.217554 · Note
• https://t.me/cvenotify/41386 · Telegram Post