3scale (>=0.3.2, <=0.6.2), 3scale-cm (0.5.1) +188 more potentially affected by CVE-2025-25341 via libxmljs (>=1.0.9, <=1.0.11)

libxmljs NPM version =1.0.9, =0.3.2, =0.3.2, =1.10.4, =1.8.1, =1.8.8, =1.0.0, =1.1.0, =0.1.0, =250.1010.0, =250.1018.0, =252.1021.0 and more Source cves: CVE-2025-25341 Source advisory: OSV:GHSA-JV72-59WQ-8RXM...

CVE-2024-12125: Improper Preservation of Permissions

A flaw was found in the 3scale Developer Portal. When creating or updating an account in the Developer Portal UI it is possible to modify fields explicitly configured as read-only or hidden, allowing an attacker to modify restricted information...

Red Hat 3scale API Management Platform 安全漏洞

Red Hat 3scale API Management Platform is an infrastructure platform for API management from Red Hat. It enables rapid API sharing, protection, distribution, control, and monetization. A security vulnerability exists in Red Hat 3scale API Management Platform that originates from unvalidated input...

EUVD-2019-5972

Malware in sbrugna...

EUVD-2020-18304

Malware in sbrugna...

EUVD-2019-5962

Malware in sbrugna...

EUVD-2020-6528

Malware in sbrugna...

EUVD-2021-26740

Malware in sbrugna...

EUVD-2021-26839

Malware in sbrugna...

EUVD-2017-16529

Malware in sbrugna...

EUVD-2019-5975

Malware in sbrugna...

EUVD-2021-7690

Malicious code in bioql PyPI...

EUVD-2023-54749

Malicious code in bioql PyPI...

EUVD-2024-16353

Malicious code in bioql PyPI...

EUVD-2024-50451

Malicious code in bioql PyPI...

PT-2024-7496 · Red Hat · Red Hat 3Scale Api Management

Name of the Vulnerable Software and Affected Versions: Red Hat 3scale API Management affected versions not specified Description: A flaw in the authentication mechanism of Red Hat 3scale API Management allows unauthorized access to the backend. This occurs when a non-base64 'basic' auth with...

CVE-2024-9671

A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed...

CVE-2024-9671 System: pdf invoices of the developer users can be seen if the url is known

A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed...

CVE-2024-9671

The CVE-2024-9671 issue affects Red Hat 3scale and is due to an absence of authentication for PDF invoices: if the URL is known or guessable, any Developer’s invoice can be accessed without auth. Documents consistently describe the vulnerability as an information exposure via predictable URLs, wi...

CVE-2024-9671 System: pdf invoices of the developer users can be seen if the url is known

A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is known. Anyone can see the invoice if the URL is known or guessed...