CVE-2021-4298: Hesburgh Libraries of Notre Dame Sipity search_criteria_for_works_parameter.rb SearchCriteriaForWorksParameter sql injection
A vulnerability classified as critical has been found in Hesburgh Libraries of Notre Dame Sipity. This affects the function SearchCriteriaForWorksParameter of the file app/parameters/sipity/parameters/searchcriteriaforworksparameter.rb. The manipulation leads to sql injection. Upgrading to version 2021.8 is able to address this issue. The patch is named d1704c7363b899ffce65be03a796a0ee5fdbfbdc. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217179.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2021-4298?
CVE-2021-4298 is classified as a critical vulnerability due to its potential for SQL injection.
How do I fix CVE-2021-4298?
To fix CVE-2021-4298, update the Sipity application to version 2021.8 or later.
What software is affected by CVE-2021-4298?
CVE-2021-4298 affects the Sipity application developed by Hesburgh Libraries of Notre Dame, specifically versions prior to 2021.8.
What type of attack does CVE-2021-4298 facilitate?
CVE-2021-4298 facilitates SQL injection attacks, which can compromise the integrity and confidentiality of the database.
Is there a known exploit for CVE-2021-4298?
Yes, CVE-2021-4298 has been publicly disclosed and is susceptible to exploitation due to its critical nature.