TI-2022-03468 CVE-2022-3782 · GHSA-g8q8-fggx-9r3q
Path traversal in Red Hat Keycloak
Priority MEDIUM 56
keycloak: path traversal via double URL encoding.
RHSA-2023:3185
Red Hat AMQ Broker 7.10.3 release and security update
Released 2023-05-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- AMQ Broker 7.10.3
Fixes 6 records
TI-2023-07279 CVE-2023-20860 · GHSA-7phw-cxx7-q9vq
Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern…
Priority MEDIUM 45
Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spri…
TI-2022-07148 CVE-2022-22971 · GHSA-rqph-vqwm-22vc
Resource allocation without limits in Spring Framework
Priority MEDIUM 41
In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.
TI-2022-07147 CVE-2022-22970 · GHSA-hh26-6xwr-ggv7
Resource allocation without limits in Spring Framework
Priority LOW 34
In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servle…
TI-2023-07280 CVE-2023-20861 · GHSA-564r-hj7v-mcr5
Uncontrolled resource consumption in Spring Framework
Priority LOW 31
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial…
TI-2023-00456 CVE-2023-0482 · GHSA-2c6g-pfx3-w7h8
In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider…
Priority LOW 24
In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.