Cross site scripting

An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI...

CVE-2020-9485

An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI...

PYSEC-2020-23

An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI...

PYSEC-2020-23

An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI...

CVE-2020-9485

An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI...

CVE-2020-9485: Improper Neutralization of Input During Web Page Generation

An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI...

PT-2020-20695 · Apache · Apache Airflow

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions 1.10.10 and below Description: A stored XSS issue was discovered in the Chart pages of the "classic" UI. Recommendations: For Apache Airflow versions 1.10.10 and below, update to a version above 1.10.10 to resolve the...

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

Design/Logic Flaw

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a critical issue leads to installing Conjur’s Postgres database with an open port. An attacker who knows the Postgres IP and port and has access to the Kubernetes cluster can gain full read/write access to the database, escalate privileges, and write policie...

CVE-2020-4062: Improper Access Control

In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with an open port. This allows an attacker to gain full read & write access to the Conjur Postgres database, including escalating the attacker's...

PT-2020-17857 · Cyberark +2 · Conjur Oss +3

Name of the Vulnerable Software and Affected Versions: Conjur OSS Helm Chart versions prior to 2.0.0 Description: A critical issue in the Conjur OSS Helm Chart results in the installation of the Conjur Postgres database with an open port, allowing an attacker to gain full read and write access to...

CVE-2020-14470

In Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could trigger a deployment that leaks the Helm Chart repository password...

CVE-2020-14470

In Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could trigger a deployment that leaks the Helm Chart repository password...

Default credentials

In Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could trigger a deployment that leaks the Helm Chart repository password...

CVE-2020-14470

In Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could trigger a deployment that leaks the Helm Chart repository password...

CVE-2020-14470

In Octopus Deploy, versions 2018.8.0 through 2019.x before 2019.12.2 are affected by CVE-2020-14470. An authenticated user could trigger a deployment that leaks the Helm Chart repository password. Root cause details are not fully enumerated in the provided documents, but the vulnerability is link...

PT-2020-14024

Name of the Vulnerable Software and Affected Versions Octopus Deploy versions 2018.8.0 through 2019.x before 2019.12.2 Description The issue allows an authenticated user to trigger a deployment that leaks the Helm Chart repository password. Recommendations For versions 2018.8.0 through 2019.x...