CVE-2024-8297

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-8297
A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwt_refresh_token_middleware.go. The manipulation of the argument Authorization leads to improper output neutralization for logs. It is possible to launch the attack remotely. The name of the patch is 81b3336b4c9240f0bf50c13cb8375cf860d945f1. It is recommended to apply a patch to fix this issue.

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://vuldb.com/?id.276072 Third Party Advisory VDB Entry
https://vuldb.com/?ctiid.276072 Permissions Required VDB Entry
https://vuldb.com/?submit.394613 Third Party Advisory VDB Entry
https://github.com/kitsada8621/Digital-Library-Management-System/issues/1 Issue Tracking Product
https://github.com/kitsada8621/Digital-Library-Management-System/commit/81b3336b4c9240f0bf50c13cb8375cf860d945f1 Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:kitsada8621:digital_library_management_system:1.0:*:*:*:*:*:*:*
History

30 Aug 2024, 15:28

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5
CPE cpe:2.3:a:kitsada8621:digital_library_management_system:1.0:*:*:*:*:*:*:*
First Time Kitsada8621 digital Library Management System
Kitsada8621
CWE CWE-117 CWE-116
References () https://vuldb.com/?id.276072 - () https://vuldb.com/?id.276072 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?ctiid.276072 - () https://vuldb.com/?ctiid.276072 - Permissions Required, VDB Entry
References () https://github.com/kitsada8621/Digital-Library-Management-System/issues/1 - () https://github.com/kitsada8621/Digital-Library-Management-System/issues/1 - Issue Tracking, Product
References () https://vuldb.com/?submit.394613 - () https://vuldb.com/?submit.394613 - Third Party Advisory, VDB Entry
References () https://github.com/kitsada8621/Digital-Library-Management-System/commit/81b3336b4c9240f0bf50c13cb8375cf860d945f1 - () https://github.com/kitsada8621/Digital-Library-Management-System/commit/81b3336b4c9240f0bf50c13cb8375cf860d945f1 - Patch

29 Aug 2024, 13:25

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-29 13:15

Updated : 2024-08-30 15:28

NVD link : CVE-2024-8297

Mitre link : CVE-2024-8297

JSON object : View

Products Affected

kitsada8621

  • digital_library_management_system
CWE
CWE-116

Improper Encoding or Escaping of Output