TI-2022-03468 CVE-2022-3782 · GHSA-g8q8-fggx-9r3q
Path traversal in Red Hat Keycloak
Priority MEDIUM 56
keycloak: path traversal via double URL encoding.
RHSA-2023:1661
Red Hat AMQ Broker 7.11.0 release and security update
Released 2023-04-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- AMQ Broker 7.11.0
Fixes 5 records
TI-2022-07148 CVE-2022-22971 · GHSA-rqph-vqwm-22vc
Resource allocation without limits in Spring Framework
Priority MEDIUM 41
In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.
TI-2022-01162 CVE-2022-1278 · GHSA-fmq7-gh8v-mjvc
A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and…
Priority LOW 35
A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.
TI-2022-07147 CVE-2022-22970 · GHSA-hh26-6xwr-ggv7
Resource allocation without limits in Spring Framework
Priority LOW 34
In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servle…
TI-2022-01896 CVE-2022-2047 · GHSA-cj7v-27pg-wf7q
Improper input validation in Eclipse Jetty
Priority LOW 16
In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid inpu…