CVE-2021-45478

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-45478
Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0119
https://www.usom.gov.tr/bildirim/tr-23-0119 Third Party Advisory
https://www.usom.gov.tr/bildirim/tr-23-0119 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:yordam:library_automation_system:*:*:*:*:*:*:*:*
History

18 May 2026, 13:16

Type Values Removed Values Added
References
  • () https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0119 -
Summary (en) Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.This issue affects Library Automation System: before 19.2. (en) Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2.

21 Nov 2024, 06:32

Type Values Removed Values Added
References () https://www.usom.gov.tr/bildirim/tr-23-0119 - Third Party Advisory () https://www.usom.gov.tr/bildirim/tr-23-0119 - Third Party Advisory

07 Nov 2023, 03:39

Type Values Removed Values Added
Summary Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.This issue affects Library Automation System: before 19.2. Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.This issue affects Library Automation System: before 19.2.

26 Jun 2023, 17:02

Type Values Removed Values Added
CWE NVD-CWE-noinfo NVD-CWE-Other
Information

Published : 2023-03-02 09:15

Updated : 2026-05-18 13:16

NVD link : CVE-2021-45478

Mitre link : CVE-2021-45478

CVE.ORG link : CVE-2021-45478

JSON object : View

Products Affected

yordam

  • library_automation_system
CWE
CWE-233

Improper Handling of Parameters

NVD-CWE-Other