Part Db Server
Approved changes feed: RSS · Atom
cpe:2.3:a:part-db:part-db-server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Part Db (92e32888-e4c4-597d-ad50-0cb00f663b12) |
|---|---|
| Product | Part Db Server (3a6dd50e-05c7-504b-8efa-22c5d400da9f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-55194 |
vulnerable | 2026-06-08 07:33:14.344624 |
Part-DB Persistent Denial of Service via Uncaught Exception from Misleading File Extension in Avatar Upload
MEDIUM (5.7)
Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload a profile picture with a misleading file extension (e.g., .jpg.txt), resulting in a persistent 500 Internal Server Error when attempting to view or edit that user’s profile. This makes the profile permanently inaccessible via the UI for both users and administrators, constituting a Denial of Service (DoS) within the user management interface. This issue has been patched in version 1.17.3.
Published: 2025-08-13T22:46:30.217Z
Updated: 2025-08-14T14:51:03.540Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26042 |
vulnerable | 2026-06-08 05:57:37.905239 |
HTML/XSS injection possibilities in Part-DB
MEDIUM (6.1)
Part-DB is an open source inventory management system for your electronic components. User input was found not being properly escaped, which allowed malicious users to inject arbitrary HTML into the pages. The Content-Security-Policy forbids inline and external scripts so it is not possible to execute JavaScript code, unless in combination with other vulnerabilities. There are no workarounds, please upgrade to Pat-DB 1.0.2 or later.
Published: 2023-02-27T14:41:24.145Z
Updated: 2025-03-10T17:48:28.160Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.