CVE-2023-1932
Published Nov 7, 2024A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitti…
Vendor/product archive
redhat / codeready_studio CVEs
Beta · best-effort5 CVEs tagged to redhat / codeready_studio — 0 Critical, 3 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2021-4104
Published Dec 14, 2021JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingNam…
- evidence mentions
- 11
- Buzz score
- 39.4
CVE-2021-3642
Published Aug 5, 2021A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if en…
CVE-2021-20218
Published Mar 16, 2021A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client…
CVE-2020-10714
Published Sep 23, 2020A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a sessi…
Showing 1-5 of 5 CVEsPage 1 of 1