Files
vuln-nvd/data/2026/CVE-2026-2395.json
T

2 lines
2.1 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"No Code Platform","vendor":"Xpoda Türkiye Informatics Technology Inc.","versions":[{"lessThan":"4.1.4","status":"affected","version":"4.1.3","versionType":"custom"}]}],"source":"iletisim@usom.gov.tr"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Xpoda Türkiye Informatics Technology Inc. No Code Platform allows SQL Injection.\n\nThis issue affects No Code Platform: from 4.1.3 before 4.1.4."},{"lang":"es","value":"Una vulnerabilidad de neutralización incorrecta de elementos especiales utilizados en un comando SQL (’inyección SQL’) en Xpoda Türkiye Informatics Technology Inc. No Code Platform permite la inyección SQL.\n\nEste problema afecta a No Code Platform: desde la versión 4.3.1.0 hasta la 20260722. NOTA: Se contactó al proveedor con antelación sobre esta divulgación, pero no respondió de ninguna manera."}],"id":"CVE-2026-2395","lastModified":"2026-10-24T13:10:00.147","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"iletisim@usom.gov.tr","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-2395","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-07-22T18:58:36.700333Z","version":"2.0.3"}}]},"published":"2026-07-22T15:16:54.193","references":[{"source":"iletisim@usom.gov.tr","url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0608"}],"sourceIdentifier":"iletisim@usom.gov.tr","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"iletisim@usom.gov.tr","type":"Secondary"}]}