THREATIST.IORead the docs Red Hat AMQ Broker 7.12.0 release and security update
Released 2024-05-21 · Red Hat rating Important · View on Red Hat →
Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution.
A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect.
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper.
Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1.
Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g.
A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.
A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.
A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages.
A flaw was found in the SAML client registration in Keycloak that could allow an administrator to register malicious JavaScript URIs as Assertion Consumer Service POST Binding URLs (ACS), posing a Cross-Site Scripting (X…
Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1.