CVE-2022-4454 - m0ver bible-online Search search.java query sql injection

Back Back to CVE browser

CRITICAL

m0ver bible-online Search search.java query sql injection

Published Dec 13, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 0.52%

Description

A vulnerability, which was classified as critical, has been found in m0ver bible-online. Affected by this issue is the function query of the file src/main/java/custom/application/search.java of the component Search Handler. The manipulation leads to sql injection. The name of the patch is 6ef0aabfb2d4ccd53fcaa9707781303af357410e. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215444.

Affected products

Vendor M0ver Product Bible-Online Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

M0ver

Bible-Online

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-707

CWE-89

SQL Injection

References (2)

https://github.com/m0ver/bible-online/commit/6ef0aabfb2d4ccd53fcaa9707781303af357410e
PatchThird Party Advisory
https://vuldb.com/?id.215444
Permissions RequiredThird Party Advisory

Link	Providers	Tags
https://github.com/m0ver/bible-online/commit/6ef0aabfb2d4ccd53fcaa9707781303af357410e		PatchThird Party Advisory
https://vuldb.com/?id.215444		Permissions RequiredThird Party Advisory