CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
69.9%
A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/db.c. The manipulation of the argument value/name leads to sql injection. The name of the patch is 7a7d737a3929f335b9717ddbd31db91151b69ad2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215252.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | nodau | < 0.3.8-5 | nodau_0.3.8-5_all.deb |
Debian | 11 | all | nodau | <= 0.3.8-4 | nodau_0.3.8-4_all.deb |
Debian | 999 | all | nodau | < 0.3.8-5 | nodau_0.3.8-5_all.deb |
Debian | 13 | all | nodau | < 0.3.8-5 | nodau_0.3.8-5_all.deb |