CVE-2015-10076

CRITIQUE 9.8CVE-2015-10076 · Published 09/02/2023 · updated 17/06/2026

En bref

CVE-2015-10076 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant shaarlier (shaarlier project).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.63%, plus élevée que 50.4% des vulnérabilités.
Correctif : mettre à jour vers 1.2.3 ou plus récent.

Package	Affected versions	Patched versions
shaarlier shaarlier_project	`< 1.2.3`	`1.2.3`

Description

A vulnerability was found in dimtion Shaarlier up to 1.2.2. It has been declared as critical. Affected by this vulnerability is the function createTag of the file app/src/main/java/com/dimtion/shaarlier/TagsSource.java of the component Tag Handler. The manipulation leads to sql injection. Upgrading to version 1.2.3 is able to address this issue. The identifier of the patch is 3d1d9b239d9b3cd87e8bed45a0f02da583ad371e. It is recommended to upgrade the affected component. The identifier VDB-220453 was assigned to this vulnerability.

References

dimtion/Shaarlier commit 3d1d9b2 · Patch
dimtion/Shaarlier release v1.2.3 · Release Notes
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free