CVE-2020-11971 vulnerabilities

Vulnerabilities for packages: geoserver...

Linux Distros Unpatched Vulnerability : CVE-2025-11971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 10.6 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed a...

CVE-2025-11971

creationtimestamp| type| source ---|---|--- 2025-10-28 14:42:08+00:00| seen| https://bsky.app/profile/checkmarxzero.bsky.social/post/3m4b64m6r6z2s...

CVE-2025-11971

GitLab EE fixed CVE-2025-11971, which allowed an authenticated attacker to trigger unauthorized pipeline executions by manipulating commits. Affected versions were 10.6 to before 18.3.5, 18.3.x before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1; remediation was released as patch updates (n...

CVE-2025-11971 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 10.6 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to trigger unauthorized pipeline executions by manipulating commits...

CVE-2025-11971 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 10.6 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to trigger unauthorized pipeline executions by manipulating commits...

CVE-2025-11971 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 10.6 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an authenticated attacker to trigger unauthorized pipeline executions by manipulating commits...

Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to Camel-core (CVE-2020-11971)

Summary Rebind Flaw vulnerability in Camel-core may affect IBM Spectrum Control. CVE-2020-11971. Vulnerability Details CVEID:CVE-2020-11971 DESCRIPTION: Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrad...

CVE-2018-11971

Interrupt exit code flow may undermine access control policy set forth by secure world can lead to potential secure asset leakage in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, in MDM9206...

CVE-2024-11971

creationtimestamp| type| source ---|---|--- 2024-11-28 22:07:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113562855124391282...

CVE-2024-11971 Guizhou Xiaoma Technology jpress Avatar upload cross site scripting

A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerability is an unknown functionality of the file /commons/attachment/upload of the component Avatar Handler. The manipulation of the argument files leads to cross site scripting. T...

CVE-2024-11971 Guizhou Xiaoma Technology jpress Avatar upload cross site scripting

A vulnerability classified as problematic was found in Guizhou Xiaoma Technology jpress 5.1.2. Affected by this vulnerability is an unknown functionality of the file /commons/attachment/upload of the component Avatar Handler. The manipulation of the argument files leads to cross site scripting. T...

Security Bulletin: Apache Camel Core vulnerability in IBM Tivoli Monitoring Data Provider (CVE-2020-11971)

Summary IBM Tivoli Monitoring Data provider is vulnerable to Apache Camel Core vulnerabilty CVE-2020-11971 Vulnerability Details CVEID:CVE-2020-11971 DESCRIPTION: Apache Camel could allow a remote attacker to obtain sensitive information, caused by a rebind flaw in JMX. By sending a...

Security Bulletin: A security vulnerability has been identified in Apache Camel shipped with IBM Tivoli Netcool Impact (CVE-2020-11971)

Summary Apache Camel is shipped with IBM Tivoli Netcool Impact as part of its backend infrastructure. Information about a security vulnerability affecting Apache Camel has been published in a security bulletin. Vulnerability Details CVEID:CVE-2020-11971 DESCRIPTION: Apache Camel could allow a...

org.apache.camel.karaf:camel-karaf-commands (2.9.3), org.apache.camel:camel-ahc (2.9.3) +140 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.9.3)

org.apache.camel:camel-core MAVEN version 2.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - org.apache.camel.karaf:camel-karaf-commands 2.9.3 - org.apache.camel:camel-ahc 2.9.3 -...

io.xtech.babel:babel-camel-core_2.10 (>=0.7.0-camel-2.14, <=0.8.0-camel-2.14), io.xtech.babel:babel-camel-core_2.11 (>=0.7.0-camel-2.14, <=0.8.0-camel-2.14) +255 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.14.2)

org.apache.camel:camel-core MAVEN version 2.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - io.xtech.babel:babel-camel-core2.10 =0.7.0-camel-2.14, =0.7.0-camel-2.14, =0.8.0-camel-2.14 -...

com.consol.citrus:citrus-camel (>=2.7.4, <=2.7.9), com.github.igor-suhorukov:camel-aws (>=2.20.1.2, <=2.20.1.5) +719 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.20.1)

org.apache.camel:camel-core MAVEN version 2.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.consol.citrus:citrus-camel =2.7.4, =2.20.1.2, =2.20.1.0, =1.2.23-release, =1.5.6, =1.3.0,...

ca.islandora.alpaca:islandora-connector-derivative (>=0.8.0, <=1.0.5), ca.islandora.alpaca:islandora-indexing-fcrepo (>=0.8.0, <=1.0.5) +616 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.20.4)

org.apache.camel:camel-core MAVEN version 2.20.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - ca.islandora.alpaca:islandora-connector-derivative =0.8.0, =0.8.0, =0.8.0, =1.0.5 -...

com.digitalml.plugins:poller-maven-plugin (>=1.0, <=1.1), com.github.oscerd:camel-cassandra (2.18.3) +596 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.18.3)

org.apache.camel:camel-core MAVEN version 2.18.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - com.digitalml.plugins:poller-maven-plugin =1.0, =0.0.3, =0.0.5 - net.kpipes:kpipes-server 0.0.3 -...

io.xtech.babel:babel-camel-core_2.10 (>=0.7.0-camel-2.13, <=0.8.0-camel-2.13), io.xtech.babel:babel-camel-core_2.11 (>=0.7.0-camel-2.13, <=0.8.0-camel-2.13) +242 more potentially affected by CVE-2020-11971 via org.apache.camel:camel-core (2.13.3)

org.apache.camel:camel-core MAVEN version 2.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-core and may be impacted: - io.xtech.babel:babel-camel-core2.10 =0.7.0-camel-2.13, =0.7.0-camel-2.13, =2.13.3, =2.13.3, =2.13.3,...