CVE-2015-10014

KRITISCH 9.8CVE-2015-10014 · Published 05/01/2023 · updated 17/06/2026

Kurz gesagt

CVE-2015-10014 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in uke (uke project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.73%, höher als bei 54.5% aller Schwachstellen.
Abhilfe: auf 2015-11-17 oder neuer aktualisieren.

Package	Affected versions	Patched versions
uke uke_project	`< 2015-11-17`	`2015-11-17`

Description

A vulnerability classified as critical has been found in arekk uke. This affects an unknown part of the file lib/uke/finder.rb. The manipulation leads to sql injection. The identifier of the patch is 52fd3b2d0bc16227ef57b7b98a3658bb67c1833f. It is recommended to apply a patch to fix this issue. The identifier VDB-217485 was assigned to this vulnerability.

References

arekk/uke commit 52fd3b2 · Patch
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free