PT-2024-32495

Name of the Vulnerable Software and Affected Versions Campcodes Legal Case Management System version 1.0 Description A vulnerability has been found in the system, classified as problematic, affecting an unknown functionality of the file /admin/client user. The manipulation of the f name argument...

io.quarkiverse.renarde:quarkus-renarde (1.0.1), io.quarkiverse.renarde:quarkus-renarde-backoffice (1.0.1) +54 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.9.0.cr1)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.9.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkiverse.renarde:quarkus-renarde 1.0.1 -...

io.quarkiverse.dapr:quarkus-dapr (1.0.3), io.quarkiverse.dapr:quarkus-dapr-deployment (1.0.3) +50 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.14.2.final)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.14.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkiverse.dapr:quarkus-dapr 1.0.3 -...

io.quarkus:quarkus-csrf-reactive (2.15.0.cr1), io.quarkus:quarkus-csrf-reactive-deployment (2.15.0.cr1) +47 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common (2.15.0.cr1)

io.quarkus:quarkus-resteasy-reactive-common MAVEN version 2.15.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common and may be impacted: - io.quarkus:quarkus-csrf-reactive 2.15.0.cr1 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.5), com.github.vzakharchenko:cisco-radius-plugin (1.4.5) +101 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (18.0.1)

org.keycloak:keycloak-core MAVEN version 18.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.5 - com.github.vzakharchenko:cisco-radius-plugin 1.4...

org.keycloak:keycloak-adapter-core (2.5.0.final), org.keycloak:keycloak-admin-client (2.5.0.final) +52 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (2.5.0.final)

org.keycloak:keycloak-core MAVEN version 2.5.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.0.final - org.keycloak:keycloak-admin-client 2.5.0.final -...

org.keycloak:keycloak-adapter-core (3.2.0.cr1), org.keycloak:keycloak-admin-client (3.2.0.cr1) +56 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (3.2.0.cr1)

org.keycloak:keycloak-core MAVEN version 3.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.2.0.cr1 - org.keycloak:keycloak-admin-client 3.2.0.cr1 -...

org.jenkins-ci.plugins:keycloak (2.0.3), org.keycloak:keycloak-adapter-core (3.2.0.final) +58 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (3.2.0.final)

org.keycloak:keycloak-core MAVEN version 3.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jenkins-ci.plugins:keycloak 2.0.3 - org.keycloak:keycloak-adapter-core 3.2.0.final -...

org.keycloak:keycloak-adapter-core (2.5.1.final), org.keycloak:keycloak-admin-client (2.5.1.final) +52 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (2.5.1.final)

org.keycloak:keycloak-core MAVEN version 2.5.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 2.5.1.final - org.keycloak:keycloak-admin-client 2.5.1.final -...

io.github.johnjcool:keycloak-cas-services (>=4.3.0.final, <=4.3.1.final), org.keycloak:keycloak-adapter-core (4.3.0.final) +64 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (4.3.0.final)

org.keycloak:keycloak-core MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.3.0.final, =4.3.1.final -...

io.github.johnjcool:keycloak-cas-services (4.4.0.final), io.gravitee.resource:gravitee-resource-oauth2-provider-keycloak (1.1.0) +65 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (4.4.0.final)

org.keycloak:keycloak-core MAVEN version 4.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.github.johnjcool:keycloak-cas-services 4.4.0.final -...

de.ahus1.keycloak.dropwizard:keycloak-dropwizard (0.9.1), org.keycloak:keycloak-adapter-core (2.5.4.final) +54 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (2.5.4.final)

org.keycloak:keycloak-core MAVEN version 2.5.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.ahus1.keycloak.dropwizard:keycloak-dropwizard 0.9.1 - org.keycloak:keycloak-adapter-core 2.5.4.fin...

org.keycloak:keycloak-account-api (1.3.0.final), org.keycloak:keycloak-account-freemarker (1.3.0.final) +87 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (1.3.0.final)

org.keycloak:keycloak-core MAVEN version 1.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.3.0.final - org.keycloak:keycloak-account-freemarker 1.3.0.final ...

org.keycloak:keycloak-account-api (1.2.0.beta1), org.keycloak:keycloak-account-freemarker (1.2.0.beta1) +80 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (1.2.0.beta1)

org.keycloak:keycloak-core MAVEN version 1.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-account-api 1.2.0.beta1 - org.keycloak:keycloak-account-freemarker 1.2.0.beta1 ...

io.hawt:hawtio-app (>=2.0-beta-2, <=2.8.0), io.hawt:hawtio-maven-plugin (>=2.0-beta-2, <=2.8.0) +62 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (3.4.1.final)

org.keycloak:keycloak-core MAVEN version 3.4.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.hawt:hawtio-app =2.0-beta-2, =2.0-beta-2, =2.8.0 - org.keycloak:keycloak-adapter-core 3.4.1.final ...

org.jboss.aerogear.unifiedpush:unifiedpush-service (1.2.1.final), org.jenkins-ci.plugins:keycloak (2.1.0) +59 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (3.4.0.final)

org.keycloak:keycloak-core MAVEN version 3.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-service 1.2.1.final - org.jenkins-ci.plugins:keycloak 2.1....

org.keycloak:keycloak-adapter-core (3.4.1.cr1), org.keycloak:keycloak-admin-client (3.4.1.cr1) +56 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (3.4.1.cr1)

org.keycloak:keycloak-core MAVEN version 3.4.1.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.keycloak:keycloak-adapter-core 3.4.1.cr1 - org.keycloak:keycloak-admin-client 3.4.1.cr1 -...

de.cidaas:cidaas-interceptor-spring-security-xml (0.0.1), org.fintrace:microservice-keycloak-support (>=0.0.2, <=0.0.3) +61 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (4.0.0.beta2)

org.keycloak:keycloak-core MAVEN version 4.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - de.cidaas:cidaas-interceptor-spring-security-xml 0.0.1 - org.fintrace:microservice-keycloak-support...

org.fintrace:microservice-keycloak-support (>=0.0.4, <=0.0.9), org.keycloak:keycloak-adapter-core (4.0.0.beta3) +64 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (4.0.0.beta3)

org.keycloak:keycloak-core MAVEN version 4.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.fintrace:microservice-keycloak-support =0.0.4, =0.0.9 - org.keycloak:keycloak-adapter-core...

org.jboss.aerogear.unifiedpush:unifiedpush-auth-server (1.0.3), org.jboss.aerogear.unifiedpush:unifiedpush-jaxrs (1.0.3) +51 more potentially affected by CVE-2023-6927 via org.keycloak:keycloak-core (1.0.5.final)

org.keycloak:keycloak-core MAVEN version 1.0.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - org.jboss.aerogear.unifiedpush:unifiedpush-auth-server 1.0.3 -...