TI-2024-01049 CVE-2024-1132 · GHSA-72vp-xfrc-42xm
Keycloak: path transversal in redirection validation
Priority HIGH 70
A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect.
RHSA-2024:3919
Migration Toolkit for Runtimes security, bug fix and enhancement update
Released 2024-06-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Migration Toolkit for Runtimes 1 on RHEL 8 mtr/mtr-operator-bundle, mtr/mtr-rhel8-operator, mtr/mtr-web-container-rhel8 +1
Fixes 5 records
TI-2023-11514 CVE-2023-26364 · GHSA-hpx4-r86g-5jrg
Denial of Service of regular expression in package @adobe/css-tools
Priority MEDIUM 63
@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a minor denial of service while attempting to parse CSS.
TI-2023-04276 CVE-2023-4639 · GHSA-3jrv-jgp8-45v3
Undertow: cookie smuggling/spoofing
Priority LOW 37
A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests.
TI-2023-26480 CVE-2023-48631 · GHSA-prr3-c3m5-p7q2
Denial of Service of regular expression in package @adobe/css-tools
Priority LOW 35
@adobe/css-tools versions 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.
TI-2023-18320 CVE-2023-36479 · GHSA-3gh6-v5v9-6v9j
Jetty vulnerable to errant command quoting in CGI Servlet
Priority LOW 19
Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project.