CVE-2022-24860

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-24860
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24860.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-24860
Aliases
  • GHSA-9prp-5jc9-jpgg
Published
2022-04-19T23:25:27Z
Modified
2026-07-15T01:49:08.980764988Z
Severity
  • 7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.
Details

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP addresses.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24860.json",
    "cwe_ids": [
        "CWE-321"
    ],
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/vran-dev/databasir

Affected ranges

Type
GIT
Repo
https://github.com/vran-dev/databasir
Events
Introduced
b575a99392b72ecc83d9b8ff1247971ee46f8604
Last affected
b575a99392b72ecc83d9b8ff1247971ee46f8604
Database specific 
{
    "extracted_events": [
        {
            "introduced": " > 1.0.1"
        },
        {
            "last_affected": " > 1.0.1"
        },
        {
            "introduced": "1.0.1"
        },
        {
            "last_affected": "1.0.1"
        }
    ],
    "cpe": "cpe:2.3:a:databasir_project:databasir:1.0.1:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ]
}

Affected versions

> 1.*
> 1.0.1
1.*
1.0.1
v1.*
v1.0.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24860.json"