Vulnerabilities > CVE-2015-10076 - Unspecified vulnerability in Shaarlier Project Shaarlier

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

shaarlier-project

critical

NVD

Published: 2023-02-09

Updated: 2024-11-21

Summary

A vulnerability was found in dimtion Shaarlier up to 1.2.2. It has been declared as critical. Affected by this vulnerability is the function createTag of the file app/src/main/java/com/dimtion/shaarlier/TagsSource.java of the component Tag Handler. The manipulation leads to sql injection. Upgrading to version 1.2.3 is able to address this issue. The identifier of the patch is 3d1d9b239d9b3cd87e8bed45a0f02da583ad371e. It is recommended to upgrade the affected component. The identifier VDB-220453 was assigned to this vulnerability.

Vulnerable Configurations

Part	Description	Count
Application	Shaarlier_Project Shaarlier Project Shaarlier - Shaarlier Project Shaarlier 0.1.0 Shaarlier Project Shaarlier 0.2.0 Shaarlier Project Shaarlier 0.2.1 Shaarlier Project Shaarlier 0.2.2 Shaarlier Project Shaarlier 1.0.0 Shaarlier Project Shaarlier 1.0.1 Shaarlier Project Shaarlier 1.0.2 Shaarlier Project Shaarlier 1.0.3 Shaarlier Project Shaarlier 1.0.4 Shaarlier Project Shaarlier 1.0.5 Shaarlier Project Shaarlier 1.1.0 Shaarlier Project Shaarlier 1.2.0 Shaarlier Project Shaarlier 1.2.1 Shaarlier Project Shaarlier 1.2.2	15

Summary

Vulnerable Configurations

References