Debian/sql-ledger: unknown

SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history.

Action: Upgrade sql-ledger to 2.4.5-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-4798
• https://security-tracker.debian.org/tracker/CVE-2006-4798

published 2006-09-14T21:07:00Z · modified 2026-10-22T23:47:34.424533008Z · JSON