CVE-2022-24860

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-24860

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24860.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-24860

Aliases

GHSA-9prp-5jc9-jpgg

Published

2022-04-19T23:25:27Z

Modified

2026-04-02T07:52:52.954963Z

Severity

7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator

Summary

Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.

Details

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP addresses.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24860.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-321"
    ]
}

References

Affected packages

Git / github.com/vran-dev/databasir

Affected ranges

Type

GIT

Repo

https://github.com/vran-dev/databasir

Events

Introduced

Last affected

b575a99392b72ecc83d9b8ff1247971ee46f8604

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": " > 1.0.1"
        }
    ]
}

Affected versions

v1.*

v1.0.0

v1.0.0-beta

v1.0.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24860.json"