Lucene search

[email protected]CVE-2022-0495

HistorySep 21, 2022 - 9:15 a.m.

CVE-2022-0495

2022-09-2109:15:09

CWE-89

[email protected]

web.nvd.nist.gov

koha

library automation

sql injection

vulnerability

parantez teknoloji

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.6%

JSON

The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01.

Affected configurations

NVD

Node

parantezteknolojikoha_library_automationRange<19.05.03.01

CPENameOperatorVersion
parantezteknoloji:koha_library_automationparantezteknoloji koha library automationlt19.05.03.01

CPE	Name	Operator	Version
parantezteknoloji:koha_library_automation	parantezteknoloji koha library automation	lt	19.05.03.01

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Parantez Teknoloji",
    "vendor": "Parantez Teknoloji",
    "versions": [
      {
        "lessThan": "19.05.03",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-22-0635

Social References

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.6%

JSON

Related for CVE-2022-0495

prion1 cvelist1 nvd1