CVE-2022-4454
MEDIUMm0ver bible-online < 2022-10-02 - SQL Injection in Search Handler
Title source: llmDescription
A vulnerability, which was classified as critical, has been found in m0ver bible-online. Affected by this issue is the function query of the file src/main/java/custom/application/search.java of the component Search Handler. The manipulation leads to sql injection. The name of the patch is 6ef0aabfb2d4ccd53fcaa9707781303af357410e. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-215444.
References (2)
Core 2
Core References
Patch, Third Party Advisory
https://github.com/m0ver/bible-online/commit/6ef0aabfb2d4ccd53fcaa9707781303af357410e
Permissions Required, Third Party Advisory
https://vuldb.com/?id.215444
Scores
CVSS v3
5.5
EPSS
0.0050
EPSS Percentile
38.4%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-89
CWE-707
Status
published
Products (1)
m0ver/bible-online
< 2022-10-02
Published
Dec 13, 2022
Tracked Since
Feb 18, 2026