CVE-2014-125079

CRITICO 9.8CVE-2014-125079 · Published 15/01/2023 · updated 17/06/2026

In breve

CVE-2014-125079 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda pontifex.http (pontifex.http project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.69%, superiore al 53.0% delle vulnerabilità.
Correzione: aggiornare a 0.1.0 o successiva.

Package	Affected versions	Patched versions
pontifex.http pontifex.http_project	`< 0.1.0`	`0.1.0`

Description

A vulnerability was found in agy pontifex.http. It has been declared as critical. This vulnerability affects unknown code of the file lib/Http.coffee. The manipulation leads to sql injection. Upgrading to version 0.1.0 is able to address this issue. The name of the patch is e52a758f96861dcef2dabfecb9da191bb2e07761. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218356.

References

agy/pontifex.http commit e52a758 · Patch
agy/pontifex.http release v0.1.0 · Third Party Advisory
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free