CVE-2015-10025

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2015-10025
A vulnerability has been found in luelista miniConf up to 1.7.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file miniConf/MessageView.cs of the component URL Scanning. The manipulation leads to denial of service. Upgrading to version 1.7.7 and 1.8.0 is able to address this issue. The patch is named c06c2e5116c306e4e1bc79779f0eda2d1182f655. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217615.

3.5 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 1.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

2.3 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:A/AC:M/Au:S/C:N/I:N/A:P

Exploitability : 4.4 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://github.com/luelista/miniConf/commit/c06c2e5116c306e4e1bc79779f0eda2d1182f655 Patch Third Party Advisory
https://vuldb.com/?ctiid.217615 Third Party Advisory
https://vuldb.com/?id.217615 Third Party Advisory
https://github.com/luelista/miniConf/commit/c06c2e5116c306e4e1bc79779f0eda2d1182f655 Patch Third Party Advisory
https://vuldb.com/?ctiid.217615 Third Party Advisory
https://vuldb.com/?id.217615 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:miniconf_project:miniconf:*:*:*:*:*:*:*:*
History

21 Nov 2024, 02:24

Type Values Removed Values Added
CVSS v2 : 2.3
v3 : 7.5 		v2 : 2.3
v3 : 3.5
References () https://github.com/luelista/miniConf/commit/c06c2e5116c306e4e1bc79779f0eda2d1182f655 - Patch, Third Party Advisory () https://github.com/luelista/miniConf/commit/c06c2e5116c306e4e1bc79779f0eda2d1182f655 - Patch, Third Party Advisory
References () https://vuldb.com/?ctiid.217615 - Third Party Advisory () https://vuldb.com/?ctiid.217615 - Third Party Advisory
References () https://vuldb.com/?id.217615 - Third Party Advisory () https://vuldb.com/?id.217615 - Third Party Advisory

07 Nov 2023, 02:23

Type Values Removed Values Added
CWE CWE-404

20 Oct 2023, 08:15

Type Values Removed Values Added
CWE CWE-404
Summary A vulnerability has been found in luelista miniConf up to 1.7.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file miniConf/MessageView.cs of the component URL Scanning. The manipulation leads to denial of service. Upgrading to version 1.7.7 and 1.8.0 is able to address this issue. The name of the patch is c06c2e5116c306e4e1bc79779f0eda2d1182f655. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217615. A vulnerability has been found in luelista miniConf up to 1.7.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file miniConf/MessageView.cs of the component URL Scanning. The manipulation leads to denial of service. Upgrading to version 1.7.7 and 1.8.0 is able to address this issue. The patch is named c06c2e5116c306e4e1bc79779f0eda2d1182f655. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217615.
Information

Published : 2023-01-07 13:15

Updated : 2024-11-21 02:24

NVD link : CVE-2015-10025

Mitre link : CVE-2015-10025

CVE.ORG link : CVE-2015-10025

JSON object : View

Products Affected

miniconf_project

  • miniconf
CWE
CWE-404

Improper Resource Shutdown or Release