CVE-2014-125048

Description

A vulnerability, which was classified as critical, has been found in kassi xingwall. This issue affects some unknown processing of the file app/controllers/oauth.js. The manipulation leads to session fixiation. The patch is named e9f0d509e1408743048e29d9c099d36e0e1f6ae7. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217559.

CVSS Version 3.1

nvd

CVE ID: CVE-2014-125048
Base Score: 5.4
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Impact Score: 2.5
Exploitability Score: 2.8

vuldb

CVE ID: CVE-2014-125048
Base Score: 6.3
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Impact Score: 3.4
Exploitability Score: 2.8

CVSS Version 3.0

vuldb

CVE ID: CVE-2014-125048
Base Score: 6.3
Base Severity: MEDIUM
Vector String:CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CVSS Version 2.0

vuldb

CVE ID: CVE-2014-125048
Base Score: 5.8
Base Severity: MEDIUM
Vector String:AV:A/AC:L/Au:N/C:P/I:P/A:P

Refrence: NVDMITRE