A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been declared as critical. This vulnerability affects unknown code of the file /AGE0000700/GetImageMedico?fooId=1. The manipulation of the argument fooId leads to improper control of resource identifiers. The attack can be initiated remotely. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component.
References
| Link | Resource |
|---|---|
| https://github.com/yago3008/cves | Third Party Advisory Exploit |
| https://vuldb.com/?ctiid.296692 | Permissions Required VDB Entry |
| https://vuldb.com/?id.296692 | VDB Entry |
| https://vuldb.com/?submit.499877 | VDB Entry Exploit Third Party Advisory |
Configurations
History
28 Feb 2025, 01:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://vuldb.com/?ctiid.296692 - Permissions Required, VDB Entry | |
| References | () https://github.com/yago3008/cves - Third Party Advisory, Exploit | |
| References | () https://vuldb.com/?submit.499877 - VDB Entry, Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?id.296692 - VDB Entry | |
| CPE | cpe:2.3:a:modernasistemas:modernanet:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Modernasistemas modernanet
Modernasistemas |
25 Feb 2025, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-25 01:15
Updated : 2025-02-28 01:55
NVD link : CVE-2025-1642
Mitre link : CVE-2025-1642
JSON object : View
Products Affected
modernasistemas
- modernanet
CWE
CWE-99
Improper Control of Resource Identifiers ('Resource Injection')