TI-2020-15666 CVE-2020-25649 · GHSA-288c-cq4h-88gq
XML external entity injection in jackson-databind
Priority MEDIUM 56
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.
RHSA-2021:0811
Red Hat Integration Tech-Preview 3 Camel K security update
Released 2021-03-11 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Integration - Camel K - Tech-Preview 3
Fixes 3 records
TI-2020-10932 CVE-2020-13956 · GHSA-7r82-7xv7-xcpj
Improper input validation in Apache HttpClient
Priority MEDIUM 42
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request executio…
TI-2020-10922 CVE-2020-13946 · GHSA-24ww-mc5x-xc43
Exposure of resource to wrong sphere in Apache Cassandra
Priority LOW 32
In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI reg…