CVE-2014-125048

CVSS V2 None CVSS V3 None

Description

A vulnerability, which was classified as critical, has been found in kassi xingwall. This issue affects some unknown processing of the file app/controllers/oauth.js. The manipulation leads to session fixiation. The name of the patch is e9f0d509e1408743048e29d9c099d36e0e1f6ae7. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217559.

Overview

CVE ID
CVE-2014-125048

Assigner
cna@vuldb.com

Vulnerability Status
Analyzed

Published Version
2023-01-06T13:15:09

Last Modified Date
2023-01-12T14:50:27

Weakness Enumerations

CWE	URL
CWE-384	http://cwe.mitre.org/data/definitions/384.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:kluks:xingwall::::::::	1	OR		e9f0d509e1408743048e29d9c099d36e0e1f6ae7

References

Reference URL	Reference Tags
https://github.com/kassi/xingwall/commit/e9f0d509e1408743048e29d9c099d36e0e1f6ae7
https://vuldb.com/?ctiid.217559
https://vuldb.com/?id.217559

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2014-125048
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-125048

History

Created	Old Value	New Value	Data Type	Notes
2023-01-06 13:17:50				Added to TrackCVE
2023-01-06 13:17:51			Weakness Enumeration	new
2023-01-06 14:17:01		2023-01-06T13:56:14	CVE Modified Date	updated
2023-01-06 14:17:01	Received	Awaiting Analysis	Vulnerability Status	updated
2023-01-06 14:17:03			CVSS V3 information	new
2023-01-06 14:17:03			CVSS V2 information	new
2023-01-10 18:20:23	Awaiting Analysis	Undergoing Analysis	Vulnerability Status	updated
2023-01-10 18:20:27			CVSS V3 information	new
2023-01-10 18:20:27			CVSS V2 information	new
2023-01-12 15:15:44		2023-01-12T14:50:27	CVE Modified Date	updated
2023-01-12 15:15:44	Undergoing Analysis	Analyzed	Vulnerability Status	updated
2023-01-12 15:15:46			CPE Information	updated
2023-01-12 15:15:46			CVSS V3 information	new
2023-01-12 15:15:46			CVSS V2 information	new