CVE-2015-10062
Last modified
CVE-2015-10062 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Line Template. EPSS estimates a 0.89% chance of exploitation in the next 30 days.
Description
A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Line Template. The manipulation leads to injection. Upgrading to version 14.10.1 is able to address this issue. The patch is named 50d65f45d3f5be5d1fbff2e45ac5cec075f07d42. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-218451.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Galaxyproject | Galaxy | < 14.10.1 |
References
- https://github.com/blankenberg/galaxy-data-resource/commit/50d65f45d3f5be5d1fbff2e45ac5cec075f07d42Patch, Third Party Advisory
- https://github.com/blankenberg/galaxy-data-resource/releases/tag/v14.10.1Third Party Advisory
- https://vuldb.com/?ctiid.218451Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.218451Permissions Required, Third Party Advisory, VDB Entry
- https://github.com/blankenberg/galaxy-data-resource/commit/50d65f45d3f5be5d1fbff2e45ac5cec075f07d42Patch, Third Party Advisory
- https://github.com/blankenberg/galaxy-data-resource/releases/tag/v14.10.1Third Party Advisory
- https://vuldb.com/?ctiid.218451Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.218451Permissions Required, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-10062?
How severe is CVE-2015-10062?
How do I fix CVE-2015-10062?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-10057A vulnerability was found in Little Apps Little Software Sta…9.8
- CVE-2015-10058A vulnerability, which was classified as problematic, was fo…6.1
- CVE-2015-10059A vulnerability has been found in s134328 Webapplication-Veg…6.1
- CVE-2015-1006A vulnerable file in Opto 22 PAC Project Professional versio…
- CVE-2015-10060A vulnerability was found in MNBikeways database and classif…9.8
- CVE-2015-10061A vulnerability was found in evandro-machado Trabalho-Web2. …9.8
- CVE-2015-10063A vulnerability was found in saemorris TheRadSystem and clas…9.8
- CVE-2015-10064A vulnerability was found in VictorFerraresi pokemon-databas…9.8
- CVE-2015-10065A vulnerability classified as critical was found in AenBleid…9.8
- CVE-2015-10066A vulnerability was found in tynx wuersch and classified as …9.8
- CVE-2015-10067A vulnerability was found in oznetmaster SSharpSmartThreadPo…8.1
- CVE-2015-10068A vulnerability classified as critical was found in danynab …9.8
Are you affected by CVE-2015-10062?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
