CVE-2016-15021

Medium

Description

A vulnerability was found in nickzren alsdb. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. Upgrading to version v2 is able to address this issue. The identifier of the patch is cbc79a68145e845f951113d184b4de207c341599. It is recommended to upgrade the affected component. The identifier VDB-218429 was assigned to this vulnerability.

SeverityMedium

CVSS5.5

Exploit probability—

ProductColumbia Als Data Browser

PublishedJan 17, 2023

First seenJan 17, 2023

Weakness typeCWE-89SQL injection

How to fix

Patches

github.com/nickzren/alsdb/commit/cbc79a68145e845f951113d184b4de207c341599
github.com/nickzren/alsdb/releases/tag/v2

Affected products

Product	Affected versions	Fixed in
columbia als_data_browser	1	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.