VulnerabilityModified
CVE-2014-125054
A vulnerability classified as critical was found in koroket RedditOnRails.
MEDIUM 4.3EPSS 0.56%
Does this matter?
Lower severity and a low EPSS score (0.56%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability classified as critical was found in koroket RedditOnRails. This vulnerability affects unknown code of the component Vote Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The patch is identified as 7f3c7407d95d532fcc342b00d68d0ea09ca71030. It is recommended to apply a patch to fix this issue. VDB-217594 is the identifier assigned to this vulnerability.
- CVSS 3.1
- 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- EPSS
- 0.56% probability · 45th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- reddit-on-rails project/reddit-on-rails
- Source
- cna@vuldb.com
References
- https://github.com/koroket/RedditOnRails/commit/7f3c7407d95d532fcc342b00d68d0ea09ca71030Patch, Third Party Advisory
- https://vuldb.com/?ctiid.217594Third Party Advisory, VDB Entry
- https://vuldb.com/?id.217594Third Party Advisory, VDB Entry
- https://github.com/koroket/RedditOnRails/commit/7f3c7407d95d532fcc342b00d68d0ea09ca71030Patch, Third Party Advisory
- https://vuldb.com/?ctiid.217594Third Party Advisory, VDB Entry
- https://vuldb.com/?id.217594Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.