Security
فارسی
All products

Red Hat Storage 3/graphite-web

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirectsCVE-2024-37891 · GHSA-34JH-P97F-MPXFVersion ranges need review. urllib3Red Hat Ansible Automation Platform 1.2/ansible-tower PyPIRed Hat Medium Fix reported
urllib3's request body not stripped after redirect from 303 status changes request method to GETCVE-2023-45803 · GHSA-G4MX-Q9VG-27P4Version ranges need review. urllib3Red Hat Certification for Red Hat Enterprise Linux 8/redhat-certification-baremetal-container PyPIRed Hat Medium Fix reported
Request smuggling leading to endpoint restriction bypass in GunicornCVE-2024-1135 · GHSA-W3H3-4RJ7-4PH4Version ranges need review. gunicornRed Hat Enterprise Linux 7/python-gunicorn PyPIRed Hat High Fix reported
`Cookie` HTTP header isn't stripped on cross-origin redirectsCVE-2023-43804 · GHSA-V845-JXX5-VC9FVersion ranges need review. urllib3Red Hat Certification for Red Hat Enterprise Linux 8/redhat-certification-baremetal-container PyPIRed Hat High Fix reported
graphite.composer.views.send_email vulnerable to SSRFCVE-2017-18638 · GHSA-VFJ6-275Q-4PVMVersion ranges need review. graphite-webRed Hat Ceph Storage 2/graphite-web PyPIRed Hat High Fix reported
Graphite Web Cross-site Scripting vulnerabilityCVE-2022-4728 · GHSA-3C5X-4HVX-QRRRVersion ranges need review. graphite-webRed Hat Storage 3/graphite-web PyPIRed Hat Medium No fix reported
Graphite Web Cross-site Scripting vulnerabilityCVE-2022-4730 · GHSA-M973-4VPC-X43CVersion ranges need review. graphite-webRed Hat Storage 3/graphite-web PyPIRed Hat Medium No fix reported
Graphite Web Cross-site Scripting vulnerabilityCVE-2022-4729 · GHSA-Q99P-78HP-XG5CVersion ranges need review. graphite-webRed Hat Storage 3/graphite-web PyPIRed Hat Medium No fix reported
Authorization Header forwarded on redirectCVE-2018-25091 · GHSA-GWVM-45GX-3CF8Version ranges need review. urllib3Red Hat Ansible Automation Platform 2/python-urllib3 PyPIRed Hat Medium Fix reported
SQL Injection in DjangoCVE-2022-28346 · GHSA-2GWJ-7JMV-H26RVersion ranges need review. djangoRed Hat Ceph Storage 3/graphite-web PyPIRed Hat Critical Fix reported
SQL Injection in DjangoCVE-2022-28347 · GHSA-W24H-V9QH-8GXJVersion ranges need review. djangoRed Hat Ceph Storage 3/graphite-web PyPIRed Hat Critical Fix reported