Approved changes feed: RSS · Atom
cpe:2.3:a:chachethq:cachet:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Chachethq (908aec0e-5f46-5811-984f-023329d9cc2c) |
|---|---|
| Product | Cachet (cf187f8b-6827-53de-9c90-08618a822a35) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:composer/cachethq/cachet |
purl2cpe | 2026-06-01 10:18:02.978052 |
pkg:github/cachethq/cachet |
purl2cpe | 2026-06-01 10:18:02.978054 |
pkg:github/fiveai/cachet |
purl2cpe | 2026-06-01 10:18:02.978056 |
pkg:golang/github.com/cachethq/cachet |
purl2cpe | 2026-06-01 10:18:02.978057 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-39165 |
vulnerable | 2026-06-08 05:33:49.078548 |
Unauthenticated SQL Injection
HIGH (8.1)
Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the `SearchableTrait#scopeSearch()`. Attackers without authentication can utilize this vulnerability to exfiltrate sensitive data from the database such as administrator's password and session. The original repository of Cachet <https://github.com/CachetHQ/Cachet> is not active, the stable version 2.3.18 and it's developing 2.4 branch is affected.
Published: 2021-08-26T20:25:12.000Z
Updated: 2024-08-04T01:58:18.142Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.