Publish Advisories

GHSA-v9w3-34xq-hrjg
GHSA-9rhq-86fm-qxqc
This commit is contained in:
advisory-database[bot]
2025-05-22 21:43:56 +00:00
parent ffe78b958b
commit 97b22934d2
2 changed files with 4 additions and 3 deletions
@@ -55,7 +55,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-312"
"CWE-312",
"CWE-863"
],
"severity": "MODERATE",
"github_reviewed": true,
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9rhq-86fm-qxqc",
"modified": "2024-01-26T19:55:58Z",
"modified": "2025-05-22T21:42:23Z",
"published": "2024-01-20T00:30:27Z",
"aliases": [
"CVE-2024-23687"
],
"summary": "Hard-coded credentials in org.folio:mod-data-export-spring",
"details": "Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.\n\n",
"details": "Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.",
"severity": [
{
"type": "CVSS_V3",