Vulnerability Details CVE-2014-125075
A vulnerability was found in gmail-servlet and classified as critical. This issue affects the function search of the file src/Model.java. The manipulation leads to sql injection. The identifier of the patch is 5d72753c2e95bb373aa86824939397dc25f679ea. It is recommended to apply a patch to fix this issue. The identifier VDB-218021 was assigned to this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.5%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 5.2
References
- https://github.com/ChrisMcMStone/gmail-servlet/commit/5d72753c2e95bb373aa86824939397dc25f679ea
- https://vuldb.com/?ctiid.218021
- https://vuldb.com/?id.218021
- https://github.com/ChrisMcMStone/gmail-servlet/commit/5d72753c2e95bb373aa86824939397dc25f679ea
- https://vuldb.com/?ctiid.218021
- https://vuldb.com/?id.218021
Products affected by CVE-2014-125075
-
cpe:2.3:a:gmail-servlet_project:gmail-servlet:-