2 lines
2.9 KiB
JSON
2 lines
2.9 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"OpenGnsys","vendor":"OpenGnsys","versions":[{"status":"affected","version":"1.1.1d"}]}],"source":"cve-coordination@incibe.es"},{"affectedData":[{"cpes":["cpe:2.3:a:opengnsys:opengnsys:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"opengnsys","vendor":"opengnsys","versions":[{"status":"affected","version":"1.1.1d"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:opengnsys:opengnsys:1.1.1d:*:*:*:*:*:*:*","matchCriteriaId":"01BCA877-074D-4F9B-B82F-6D23F111F9C6","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"SQL Injection Vulnerability has been found on OpenGnsys product affecting version 1.1.1d (Espeto). This vulnerability allows an attacker to inject malicious SQL code into login page to bypass it or even retrieve all the information stored in the database."},{"lang":"es","value":"Se ha encontrado una vulnerabilidad de inyección SQL en el producto OpenGnsys que afecta la versión 1.1.1d (Espeto). Esta vulnerabilidad permite a un atacante inyectar código SQL malicioso en la página de inicio de sesión para evitarla o incluso recuperar toda la información almacenada en la base de datos."}],"id":"CVE-2024-3704","lastModified":"2026-06-17T07:44:50.690","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"cve-coordination@incibe.es","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-3704","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-06-18T19:21:20.654359Z","version":"2.0.3"}}]},"published":"2024-04-12T14:15:08.743","references":[{"source":"cve-coordination@incibe.es","tags":["Vendor Advisory"],"url":"https://opengnsys.es/web/parche-de-seguridad-cve-2024-370x"},{"source":"cve-coordination@incibe.es","tags":["Third Party Advisory"],"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-opengnsys"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://opengnsys.es/web/parche-de-seguridad-cve-2024-370x"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-opengnsys"}],"sourceIdentifier":"cve-coordination@incibe.es","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"cve-coordination@incibe.es","type":"Secondary"}]}
|