GHSA-8WRG-M8VM-5FVJ Authentication Bypass by Primary Weakness in github.com/kongchuanhujiao/server

Impact Authentication Bypass by Primary Weakness CWE-305 Commit: https://github.com/kongchuanhujiao/server/commit/9a125624f219e496bdf4b07b404816d5a309bdc1 ALL Users is impacted. Patches Yes, PLEASE UPGRADE TO v1.3.21-beta.d0ffc0a6...

Remote Code Execution (RCE)

cassandra-all is vulnerable to remote code execution. When enableuserdefinedfunctions, enablescripteduserdefinedfunctions, and enablescripteduserdefinedfunctions are set, an attacker can inject and execute malicious code on the host through the scripted UDFs...

com.spotify:scio-cassandra2_2.11 (>=0.6.0, <=0.7.0-beta1), com.spotify:scio-cassandra2_2.12 (>=0.6.0, <=0.7.0-beta1) +1 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.2.12)

org.apache.cassandra:cassandra-all MAVEN version 2.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.spotify:scio-cassandra22.11 =0.6.0, =0.6.0, =1.2.2, =2.0 Source cves: CVE-2021-44521...

com.dell.doradus:doradus-rest (2.1.1), com.dell.doradus:doradus-server (>=2.1.1, <=2.3) +5 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.7)

org.apache.cassandra:cassandra-all MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.dell.doradus:doradus-rest 2.1.1 - com.dell.doradus:doradus-server =2.1.1, =0.7.0, =0.8....

com.hmsonline:hms-cassandra-mapreduce (1.0.1), org.codehaus.mojo:cassandra-maven-plugin (1.2.1-1) potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.2.1)

org.apache.cassandra:cassandra-all MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.hmsonline:hms-cassandra-mapreduce 1.0.1 - org.codehaus.mojo:cassandra-maven-plugin...

me.prettyprint:hector-core (>=0.7.0-29, <=0.7.0-31), me.prettyprint:hector-object-mapper (>=1.0-07, <=1.0-09) +2 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (0.7.4)

org.apache.cassandra:cassandra-all MAVEN version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - me.prettyprint:hector-core =0.7.0-29, =1.0-07, =1.0-09 -...

me.prettyprint:hector-test (>=1.0-2, <=1.0-4), org.cassandraunit:cassandra-unit (1.0.3.1) potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.0.6)

org.apache.cassandra:cassandra-all MAVEN version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - me.prettyprint:hector-test =1.0-2, =1.0-4 - org.cassandraunit:cassandra-unit 1.0.3.1 Source...

com.hmsonline:hms-cassandra-indexing (1.0.0), com.hmsonline:hms-cassandra-mapreduce (1.0.0) +14 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.1.2)

org.apache.cassandra:cassandra-all MAVEN version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.hmsonline:hms-cassandra-indexing 1.0.0 - com.hmsonline:hms-cassandra-mapreduce 1.0.0 -...

com.newzly:phantom-cassandra-unit_2.10 (>=0.4.0, <=0.6.0), com.stratio.deep:deep-commons (>=0.2.2, <=0.2.9) +9 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.5)

org.apache.cassandra:cassandra-all MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.newzly:phantom-cassandra-unit2.10 =0.4.0, =0.2.2, =0.2.2, =0.2.2, =0.2.9 -...

info.archinnov:achilles-embedded (>=3.0.20, <=3.0.22), info.archinnov:achilles-junit (>=3.0.20, <=3.0.22) +1 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.15)

org.apache.cassandra:cassandra-all MAVEN version 2.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - info.archinnov:achilles-embedded =3.0.20, =3.0.20, =3.0.20, =3.0.22 Source cves:...

com.att.cadi:cadi-cass (>=1.2.10-oss, <=1.2.11-oss), com.datastax.spark:kafka-streaming_2.10 (>=1.1.0, <=1.2.0-alpha2) +13 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.1.2)

org.apache.cassandra:cassandra-all MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.att.cadi:cadi-cass =1.2.10-oss, =1.1.0, =1.1.0, =1.1.0, =3.1.0, =3.1.0, =3.1.0, =0.5,...

info.archinnov:achilles-embedded (>=3.0.0, <=3.0.1), info.archinnov:achilles-junit (>=3.0.0, <=3.0.1) +2 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.3)

org.apache.cassandra:cassandra-all MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - info.archinnov:achilles-embedded =3.0.0, =3.0.0, =1.0.0, =1.2.0 Source cves: CVE-2021-44521...

me.prettyprint:hector-test (1.0-5) potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.0.9)

org.apache.cassandra:cassandra-all MAVEN version 1.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - me.prettyprint:hector-test 1.0-5 Source cves: CVE-2021-44521 Source advisory:...

info.archinnov:achilles-embedded (3.0.2), info.archinnov:achilles-junit (3.0.2) +2 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.6)

org.apache.cassandra:cassandra-all MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - info.archinnov:achilles-embedded 3.0.2 - info.archinnov:achilles-junit 3.0.2 -...

com.datastax.spark:spark-cassandra-connector-demos_2.10 (>=1.1.0-alpha2, <=1.1.0-beta1), com.datastax.spark:spark-cassandra-connector-embedded_2.10 (>=1.1.0-alpha2, <=1.1.0-beta1) +7 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.1.0)

org.apache.cassandra:cassandra-all MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.datastax.spark:spark-cassandra-connector-demos2.10 =1.1.0-alpha2, =1.1.0-alpha2, =0.80,...

me.prettyprint:hector-core (0.8.0-1), me.prettyprint:hector-object-mapper (1.1-01) +3 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (0.8.0)

org.apache.cassandra:cassandra-all MAVEN version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - me.prettyprint:hector-core 0.8.0-1 - me.prettyprint:hector-object-mapper 1.1-01 -...

com.github.stephenc.hector:hector-core (0.7.0-rc4-1), com.github.stephenc.scale7:scale7-pelops (0.912-0.7.0-rc4-1) +1 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (0.7.0-rc4)

org.apache.cassandra:cassandra-all MAVEN version 0.7.0-rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.github.stephenc.hector:hector-core 0.7.0-rc4-1 -...

com.datastax.cassandra:cassandra-driver-core (>=1.0.6, <=1.0.8), com.datastax.cassandra:cassandra-driver-examples-parent (>=1.0.6, <=1.0.8) +3 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.2.15)

org.apache.cassandra:cassandra-all MAVEN version 1.2.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.datastax.cassandra:cassandra-driver-core =1.0.6, =1.0.6, =1.0.6, =1.0.6, =0.1.0, =2.0....

ch.uzh.ifi.ddis.ifp:cassandra-esper (>=0.1.0, <=0.3.0), ch.uzh.ifi.ddis.ifp:cassandra-esper-integration-tests (>=0.2.2, <=0.3.0) +10 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.2.5)

org.apache.cassandra:cassandra-all MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - ch.uzh.ifi.ddis.ifp:cassandra-esper =0.1.0, =0.2.2, =1.0.1, =1.0.4 -...

com.netflix.dynomite-manager:dynomitemanager (>=0.2.0, <=0.2.1) potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (1.2.7)

org.apache.cassandra:cassandra-all MAVEN version 1.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.netflix.dynomite-manager:dynomitemanager =0.2.0, =0.2.1 Source cves: CVE-2021-44521...