mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Publish Advisories
GHSA-v9w3-34xq-hrjg GHSA-9rhq-86fm-qxqc
This commit is contained in:
@@ -55,7 +55,8 @@
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-312"
|
||||
"CWE-312",
|
||||
"CWE-863"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": true,
|
||||
|
||||
@@ -1,13 +1,13 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-9rhq-86fm-qxqc",
|
||||
"modified": "2024-01-26T19:55:58Z",
|
||||
"modified": "2025-05-22T21:42:23Z",
|
||||
"published": "2024-01-20T00:30:27Z",
|
||||
"aliases": [
|
||||
"CVE-2024-23687"
|
||||
],
|
||||
"summary": "Hard-coded credentials in org.folio:mod-data-export-spring",
|
||||
"details": "Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.\n\n",
|
||||
"details": "Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
|
||||
Reference in New Issue
Block a user