CVE-2013-10013

CRITICO 9.8CVE-2013-10013 · Published 17/01/2023 · updated 16/06/2026

In breve

CVE-2013-10013 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda authenticator plugin (authenticator plugin project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.71%, superiore al 53.9% delle vulnerabilità.
Correzione: aggiornare a 1.39 o successiva.

Package	Affected versions	Patched versions
authenticator plugin authenticator_plugin_project	`< 1.39`	`1.39`

Description

A vulnerability was found in Bricco Authenticator Plugin. It has been declared as critical. This vulnerability affects the function authenticate/compare of the file src/java/talentum/escenic/plugins/authenticator/authenticators/DBAuthenticator.java. The manipulation leads to sql injection. Upgrading to version 1.39 is able to address this issue. The name of the patch is a5456633ff75e8f13705974c7ed1ce77f3f142d5. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218428.

References

Bricco/authenticator-plugin commit a545663 · Patch
Bricco/authenticator-plugin release 1.39 · Release Notes
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free