CVE-2023-52096

Description

SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a timestamp parameter of 1000000). This may lead to a SQL exception in applications, and may undermine the integrity of transaction records.

Weakness classification

• nvd@nist.gov: CWE-89

Primary references

• cve@mitre.org — Product
• cve@mitre.org — Exploit, Issue Tracking
• cve@mitre.org — Exploit, Issue Tracking, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Product
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Vendor Advisory