CVE-2021-45478

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.

This issue affects Library Automation System: before 19.2.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-233

Affected software

Vendor	Product	Versions
Yordam Information Technologies	Library Automation System	< 19.2

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0119
https://www.usom.gov.tr/bildirim/tr-23-0119Third Party Advisory
https://www.usom.gov.tr/bildirim/tr-23-0119Third Party Advisory

Timeline

Published: Mar 2, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-454795.4Improper Neutralization of Input During Web Page Generation vulnerability in Yordam Information Technologies Library Automation System allow CVE-2021-454805.5An issue was discovered in the Linux kernel before 5.15.11. There is a memory leak in the __rds_conn_create() function in net/rds/connection CVE-2021-454816.5In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create, leading to a segme CVE-2021-454826.5In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability than CVE-2021-30889.CVE-2021-454836.5In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889.CVE-2021-454847.5In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG.CVE-2021-454857.5In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a has CVE-2021-454863.5In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small.CVE-2021-454877.5In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures.CVE-2021-454887.5In NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm.CVE-2021-454897.5In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG.CVE-2021-454909.1The client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application for Android through 2022-03-17 lack SSL certificate