Approved changes feed: RSS · Atom

cpe:2.3:a:lockss:classic_lockss_daemon:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLockss (d94ed8f7-02b6-5847-909f-a397503b2e6f)
ProductClassic Lockss Daemon (3baa74ec-e3f4-52d3-919b-8d8e31767ede)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/lockss/lockss-daemon purl2cpe 2026-06-01 10:16:05.077094

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-42183 vulnerable 2026-06-08 06:11:07.920458 Details available
lockss-daemon (aka Classic LOCKSS Daemon) before 1.77.3 performs post-Unicode normalization, which may allow bypass of intended access restrictions, such as when U+1FEF is converted to a backtick.
Published: 2023-12-15T00:00:00.000Z
Updated: 2024-10-08T14:17:47.557Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.