Lucene search

GoogleOSV:CVE-2023-45826

HistoryOct 19, 2023 - 7:15 p.m.

CVE-2023-45826

2023-10-1919:15:16

Google

osv.dev

leantime

open source

sql injection

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.6 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.1%

JSON

Leantime is an open source project management system. A ‘userId’ variable in app/domain/files/repositories/class.files.php is not parameterized. An authenticated attacker can send a carefully crafted POST request to /api/jsonrpc to exploit an SQL injection vulnerability. Confidentiality is impacted as it allows for dumping information from the database. This issue has been addressed in version 2.4-beta-4. Users are advised to upgrade. There are no known workarounds for this vulnerability.

CPENameOperatorVersion
leantimeeq2.3.18
leantimeeq2.0.13
leantimeeq2.2.5
leantimeeq2.0.7
leantimeeq2.3.15
leantimeeq2.1
leantimeeq2.3.17
leantimeeq2.0.1
leantimeeq2.1-beta6
leantimeeq2.2.6

Name	Operator	Version
leantime	eq	2.3.18
leantime	eq	2.0.13
leantime	eq	2.2.5
leantime	eq	2.0.7
leantime	eq	2.3.15
leantime	eq	2.1
leantime	eq	2.3.17
leantime	eq	2.0.1
leantime	eq	2.1-beta6
leantime	eq	2.2.6

Rows per page:

1-10 of 771

References

github.com/Leantime/leantime/commit/be75f1e0f311d11c00a0bdc7079a62eef3594bf0

github.com/Leantime/leantime/security/advisories/GHSA-559g-3h98-g3fj

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.6 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.1%

JSON

Related for OSV:CVE-2023-45826