EUVD-2026-59839
GHSA-p2pw-xc8c-mvmj
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-exposed unauthenticated endpoint justifies AV:N/PR:N; SQL injection yields partial read/write/availability impact (C:L/I:L/A:L); scope remains within Evergreen database boundary (S:U).
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown function of the file /osrf-gateway-v1 of the component open-ils.fielder OpenSRF Service. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.14.12, 3.15.12, 3.16.6 and 3.17-beta2 is sufficient to fix this issue. The affected component should be upgraded.
AnalysisAI
SQL injection in Evergreen's open-ils.fielder OpenSRF Service, exposed via the /osrf-gateway-v1 HTTP gateway endpoint, affects all actively maintained branches through 3.14.11, 3.15.11, 3.16.5, and 3.17-beta1. The CVSS 4.0 vector confirms network-accessible, unauthenticated exploitation with low attack complexity, yielding partial confidentiality, integrity, and availability impact against the underlying database. A public proof-of-concept has been disclosed and patched releases (3.14.12, 3.15.12, 3.16.6, 3.17-beta2) are available, making delayed remediation difficult to justify given the exploit's public availability.
Technical ContextAI
Evergreen is an open-source integrated library system (ILS) used predominantly by public and academic libraries. Its backend relies on OpenSRF (Open Service Request Framework), a message-passing middleware layer; the /osrf-gateway-v1 endpoint acts as an HTTP-to-OpenSRF bridge, translating web requests into backend service calls. The open-ils.fielder service is a data-retrieval component that constructs database queries based on caller-supplied parameters. CWE-89 (Improper Neutralization of Special Elements used in an SQL Command) indicates that user-controlled input reaching this service is not adequately sanitized or parameterized before inclusion in SQL statements. Because /osrf-gateway-v1 is typically exposed publicly to support the Evergreen OPAC (Online Public Access Catalog) and staff client, the injection surface is network-reachable without authentication. The CPE cpe:2.3:a:n/a:evergreen:*:*:*:*:*:*:*:* covers all platform variants of Evergreen across the affected version ranges.
RemediationAI
Upgrade to the patched release corresponding to your installed branch: 3.14.12, 3.15.12, 3.16.6, or 3.17-beta2, as detailed in the vendor security advisory at https://evergreen-ils.org/Evergreen-security-release-3-14-12-3-15-12-3-16-6-3-17-beta2. If immediate patching cannot be completed, consider restricting network access to the /osrf-gateway-v1 endpoint via firewall rules or reverse-proxy access controls to known staff or trusted IP ranges; note this will break public OPAC functionality for remote patrons and should be treated as a temporary measure only. Deploying a web application firewall (WAF) rule to detect and block SQL metacharacters in requests to /osrf-gateway-v1 is an additional compensating control, though WAF bypass is possible for sophisticated attackers and should not substitute for patching. Audit Evergreen database access logs for anomalous query patterns in the fielder service context as a detection measure.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today