Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-52096

Опубликовано: 26 дек. 2023
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a timestamp parameter of 1000000). This may lead to a SQL exception in applications, and may undermine the integrity of transaction records.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:steve-community:ocpp-jaxb:*:*:*:*:*:*:*:*
Версия до 0.0.8 (исключая)

EPSS

Процентиль: 53%
0.00306
Низкий

7.5 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.5
github
около 2 лет назад

SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a timestamp parameter of 1000000). This may lead to a SQL exception in applications, and may undermine the integrity of transaction records.

EPSS

Процентиль: 53%
0.00306
Низкий

7.5 High

CVSS3

Дефекты

CWE-89