CVE-2024-23687 FOLIO mod-data-export-spring Hard-Coded Credentials

2024-01-1921:15:18

VulnCheck

www.cve.org

hard-coded credentials

folio

mod-data-export-spring

unauthenticated users

critical apis

modify user data

modify configurations

single-sign-on

manipulate fees/fines

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.6%

JSON

Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.

CNA Affected

[
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.folio:mod-data-export-spring",
    "versions": [
      {
        "lessThan": "1.5.4",
        "status": "affected",
        "version": "0",
        "versionType": "maven"
      },
      {
        "lessThan": "2.0.2",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "maven"
      }
    ]
  }
]