| Denial of Service due to parser crashCVE-2022-40152 · GHSA-3F7H-MF4Q-VRM4 |
com.fasterxml.woodstox:woodstox-coreMigration Toolkit for Runtimes/xstream |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Guava vulnerable to insecure use of temporary directoryCVE-2023-2976 · GHSA-7G45-4RM6-3MM3 |
com.google.guava:guavaMigration Toolkit for Runtimes/org.jboss.windup-windup-parent |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNodeCVE-2021-46877 · GHSA-3X8X-79M2-3W2W |
com.fasterxml.jackson.core:jackson-databindCryostat 2/jackson-databind |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Encoded URIs can access WEB-INF directory in Eclipse JettyCVE-2021-34429 · GHSA-VJV5-GP2W-65VM |
org.eclipse.jetty:jetty-webappRed Hat Enterprise Linux 7/jetty |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Apache Commons FileUpload denial of service vulnerabilityCVE-2023-24998 · GHSA-HFRX-6QGJ-FP6C |
commons-fileupload:commons-fileuploadorg.apache.tomcat.embed:tomcat-embed-core |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| HTTP/2 Stream Cancellation AttackCVE-2023-44487 · GHSA-QPPJ-FM5R-HXR3 |
golang.org/x/netcom.typesafe.akka:akka-http-core |
GoMavenRed HatSwift |
متوسط
|
اصلاح گزارش شده |
|
| Information Disclosure in GuavaCVE-2020-8908 · GHSA-5MG8-W23W-74H3 |
com.google.guava:guavaRed Hat Enterprise Linux 7/guava |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| Denial of Service by injecting highly recursive collections or maps in XStreamCVE-2021-43859 · GHSA-RMR5-CPV2-VGJF |
com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| HTTP/2 HPACK integer overflow and buffer allocationCVE-2023-36478 · GHSA-WGH7-54F2-X98R |
org.eclipse.jetty.http2:http2-hpackorg.eclipse.jetty.http3:http3-qpack |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Spring Framework vulnerable to denial of service via specially crafted SpEL expressionCVE-2023-20861 · GHSA-564R-HJ7V-MCR5 |
org.springframework:spring-expressionRed Hat AMQ Broker 7/springframework |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Information Disclosure in Apache GroovyCVE-2020-17521 · GHSA-RCJJ-H6GH-JF3R |
org.codehaus.groovy:groovy-allorg.codehaus.groovy:groovy |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Authorization bypass in Spring SecurityCVE-2022-22978 · GHSA-HH32-7344-CG2F |
org.springframework.security:spring-security-coreorg.springframework.security:spring-security-web |
MavenRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| Jenkins temporary uploaded file created with insecure permissionsCVE-2023-43498 · GHSA-HQ87-H4JG-VXFW |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
کم
|
اصلاح گزارش شده |
|
| Jenkins does not exclude sensitive build variables from searchCVE-2023-43494 · GHSA-279F-QWGH-H5MP |
org.jenkins-ci.main:jenkins-coreOpenShift Developer Tools and Services/jenkins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper Handling of Length Parameter Inconsistency in Apache AntCVE-2021-36374 · GHSA-5V34-G2PX-J4FW |
org.apache.ant:antRed Hat BPM Suite 6/ant |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Improper Privilege Management in Spring FrameworkCVE-2021-22118 · GHSA-GFWJ-FWQJ-FP3V |
org.springframework:spring-webRed Hat OpenShift Container Platform 3.11/jenkins |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Improper Handling of Length Parameter Inconsistency in Apache AntCVE-2021-36373 · GHSA-Q5R4-CFPX-H6FH |
org.apache.ant:antRed Hat BPM Suite 6/ant |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Cross-Site Request Forgery in Jenkins Mailer PluginCVE-2022-20613 · GHSA-85RQ-HP8X-GHJQ |
org.jenkins-ci.plugins:mailerRed Hat OpenShift Container Platform 3.11/jenkins-2-plugins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Incorrect Permission Assignment for Critical Resource in Jenkins Mailer PluginCVE-2022-20614 · GHSA-558X-H7RG-997V |
org.jenkins-ci.plugins:mailerRed Hat OpenShift Container Platform 3.11/jenkins-2-plugins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Stored XSS vulnerability in Matrix Project PluginCVE-2022-20615 · GHSA-VQWG-4V6F-H6X5 |
org.jenkins-ci.plugins:matrix-projectRed Hat OpenShift Container Platform 3.11/jenkins-2-plugins |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
