TI-2024-01491 CVE-2024-1597 · GHSA-24rp-q3w6-vc56
pgjdbc SQL Injection via line comment generation
Priority HIGH 82
pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE.
RHSA-2024:4057
Release of OpenShift Serverless Logic 1.33.0 security update & enhancements
Released 2024-06-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Serverless 1.33 openshift-serverless-1/logic-data-index-ephemeral-rhel8, openshift-serverless-1/logic-data-index-postgresql-rhel8, openshift-serverless-1/logic-jobs-service-ephemeral-rhel8 +6
Fixes 7 records
TI-2023-28403 CVE-2023-51775 · GHSA-6qvw-249j-h44c
The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service…
Priority MEDIUM 62
The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.
TI-2024-16916 CVE-2024-25710 · GHSA-4g9r-vxhx-9pgx
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
Priority LOW 36
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.
TI-2024-14948 CVE-2024-22371 · GHSA-qpxm-689r-3849
Apache Camel issue on ExchangeCreatedEvent
Priority LOW 34
Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that exposes sensitive data.
TI-2024-01163 CVE-2024-1249 · GHSA-m6q9-p373-g5q8
Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos
Priority LOW 33
A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages.
TI-2023-06139 CVE-2023-6717 · GHSA-8rmm-gm28-pj8q
Keycloak: xss via assertion consumer service url in saml post-binding flow
Priority LOW 30
A flaw was found in the SAML client registration in Keycloak that could allow an administrator to register malicious JavaScript URIs as Assertion Consumer Service POST Binding URLs (ACS), posing a Cross-Site Scripting (X…
TI-2024-17389 CVE-2024-26308 · GHSA-4265-ccf5-phj5
Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file
Priority LOW 27
Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26.