CVE-2021-4297

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-4297
A vulnerability has been found in trampgeek jobe up to 1.6.4 and classified as problematic. This vulnerability affects the function runs_post of the file application/controllers/Restapi.php. The manipulation of the argument sourcefilename leads to an unknown weakness. Upgrading to version 1.6.5 is able to address this issue. The patch is identified as 694da5013dbecc8d30dd83e2a83e78faadf93771. It is recommended to upgrade the affected component. VDB-217174 is the identifier assigned to this vulnerability.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 3.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

4.9 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:A/AC:M/Au:S/C:P/I:P/A:P

Exploitability : 4.4 / Impact : 6.4

Access Vector ADJACENT_NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://github.com/trampgeek/jobe/commit/694da5013dbecc8d30dd83e2a83e78faadf93771 Patch
https://github.com/trampgeek/jobe/issues/46 Issue Tracking Patch Third Party Advisory
https://vuldb.com/?ctiid.217174 Permissions Required Third Party Advisory
https://vuldb.com/?id.217174 Permissions Required Third Party Advisory
https://github.com/trampgeek/jobe/commit/694da5013dbecc8d30dd83e2a83e78faadf93771 Patch
https://github.com/trampgeek/jobe/issues/46 Issue Tracking Patch Third Party Advisory
https://vuldb.com/?ctiid.217174 Permissions Required Third Party Advisory
https://vuldb.com/?id.217174 Permissions Required Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:jobe_project:jobe:*:*:*:*:*:*:*:*
History

21 Nov 2024, 06:37

Type Values Removed Values Added
References () https://github.com/trampgeek/jobe/commit/694da5013dbecc8d30dd83e2a83e78faadf93771 - Patch () https://github.com/trampgeek/jobe/commit/694da5013dbecc8d30dd83e2a83e78faadf93771 - Patch
References () https://github.com/trampgeek/jobe/issues/46 - Issue Tracking, Patch, Third Party Advisory () https://github.com/trampgeek/jobe/issues/46 - Issue Tracking, Patch, Third Party Advisory
References () https://vuldb.com/?ctiid.217174 - Permissions Required, Third Party Advisory () https://vuldb.com/?ctiid.217174 - Permissions Required, Third Party Advisory
References () https://vuldb.com/?id.217174 - Permissions Required, Third Party Advisory () https://vuldb.com/?id.217174 - Permissions Required, Third Party Advisory
CVSS v2 : 4.9
v3 : 9.8 		v2 : 4.9
v3 : 5.5

20 Oct 2023, 14:15

Type Values Removed Values Added
Summary A vulnerability has been found in trampgeek jobe up to 1.6.4 and classified as problematic. This vulnerability affects the function runs_post of the file application/controllers/Restapi.php. The manipulation of the argument sourcefilename leads to an unknown weakness. Upgrading to version 1.6.5 is able to address this issue. The name of the patch is 694da5013dbecc8d30dd83e2a83e78faadf93771. It is recommended to upgrade the affected component. VDB-217174 is the identifier assigned to this vulnerability. A vulnerability has been found in trampgeek jobe up to 1.6.4 and classified as problematic. This vulnerability affects the function runs_post of the file application/controllers/Restapi.php. The manipulation of the argument sourcefilename leads to an unknown weakness. Upgrading to version 1.6.5 is able to address this issue. The patch is identified as 694da5013dbecc8d30dd83e2a83e78faadf93771. It is recommended to upgrade the affected component. VDB-217174 is the identifier assigned to this vulnerability.
Information

Published : 2023-01-01 19:15

Updated : 2024-11-21 06:37

NVD link : CVE-2021-4297

Mitre link : CVE-2021-4297

CVE.ORG link : CVE-2021-4297

JSON object : View

Products Affected

jobe_project

  • jobe
CWE
NVD-CWE-noinfo