Red Hat Security AdvisoryRHSA-2024:11023
HawtIO 4.1.0 for Red Hat build of Apache Camel 4 Release and security update.
Released 2024-12-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- HawtIO 4.0.0 for Red Hat build of Apache Camel 4
Fixes 9 records
Priority MEDIUM 58
Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.21263 · Published 2024-09-13 · Partial fix · 5.3.40, 6.0.24 +1 CWE-22
Priority MEDIUM 42
The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could lead to Memory Exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01471 · Published 2024-05-13 · Partial fix · 3.0.3 CWE-1050
Priority MEDIUM 41
path-to-regexp turns path strings into a regular expressions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00932 · Published 2024-09-09 · Partial fix · 0.1.10, 8.0.0 +3 CWE-1333
Priority LOW 38
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02644 · Published 2024-08-21 · Partial fix · 2.2.36.Final, 2.3.17.Final +27 CWE-362
Priority LOW 31
There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0103 · Published 2024-10-14 · Partial fix · 12.0.9, 10.0.24 +2 CWE-400
Priority LOW 31
A vulnerability was found in the quarkus-core component.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00309 · Published 2024-04-04 · Partial fix · 3.2.12.Final-redhat-00001, 3.8.4.redhat-00002 +8 CWE-526
Priority LOW 24
serve-static serves static files.
CVSS 3.1MEDIUM 5.0· Network · No auth · User interaction · EPSS 0.00631 · Published 2024-09-10 · Partial fix · 1.16.0, 2.1.0 CWE-79
Priority LOW 24
Send is a library for streaming files from the file system as a http response.
CVSS 3.1MEDIUM 5.0· Network · No auth · User interaction · EPSS 0.00541 · Published 2024-09-10 · Partial fix · 0.19.0 CWE-79
Priority LOW 23
Express.js minimalist web framework for node.
CVSS 3.1MEDIUM 5.0· Network · No auth · User interaction · EPSS 0.00486 · Published 2024-09-10 · Partial fix · 4.20.0, 5.0.0 CWE-79
THREATIST.IORead the docs