CVE-2024-8297

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwt_refresh_token_middleware.go. The manipulation of the argument Authorization leads to improper output neutralization for logs. It is possible to launch the attack remotely. The name of the patch is 81b3336b4c9240f0bf50c13cb8375cf860d945f1. It is recommended to apply a patch to fix this issue.
Configurations

Configuration 1 (hide)

cpe:2.3:a:kitsada8621:digital_library_management_system:1.0:*:*:*:*:*:*:*

History

30 Aug 2024, 15:28

Type Values Removed Values Added
First Time Kitsada8621 digital Library Management System
Kitsada8621
CWE CWE-116
CPE cpe:2.3:a:kitsada8621:digital_library_management_system:1.0:*:*:*:*:*:*:*
References () https://github.com/kitsada8621/Digital-Library-Management-System/commit/81b3336b4c9240f0bf50c13cb8375cf860d945f1 - () https://github.com/kitsada8621/Digital-Library-Management-System/commit/81b3336b4c9240f0bf50c13cb8375cf860d945f1 - Patch
References () https://github.com/kitsada8621/Digital-Library-Management-System/issues/1 - () https://github.com/kitsada8621/Digital-Library-Management-System/issues/1 - Issue Tracking, Product
References () https://vuldb.com/?ctiid.276072 - () https://vuldb.com/?ctiid.276072 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.276072 - () https://vuldb.com/?id.276072 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.394613 - () https://vuldb.com/?submit.394613 - Third Party Advisory, VDB Entry
CVSS v2 : 5.0
v3 : 5.3
v2 : 5.0
v3 : 7.5
Summary
  • (es) Se ha encontrado una vulnerabilidad en kitsada8621 Digital Library Management System 1.0. Se ha clasificado como problemática. La función afectada es JwtRefreshAuth del archivo middleware/jwt_refresh_token_middleware.go. La manipulación del argumento Authorization provoca una neutralización incorrecta de la salida de los registros. Es posible lanzar el ataque de forma remota. El nombre del parche es 81b3336b4c9240f0bf50c13cb8375cf860d945f1. Se recomienda aplicar un parche para solucionar este problema.

29 Aug 2024, 13:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-29 13:15

Updated : 2024-08-30 15:28


NVD link : CVE-2024-8297

Mitre link : CVE-2024-8297

CVE.ORG link : CVE-2024-8297


JSON object : View

Products Affected

kitsada8621

  • digital_library_management_system
CWE
CWE-116

Improper Encoding or Escaping of Output

CWE-117

Improper Output Neutralization for Logs