Input validation

CycloneDX BOM Repository Server is a bill of materials BOM repository server for distributing CycloneDX BOMs. CycloneDX BOM Repository Server before version 2.0.1 has an improper input validation vulnerability leading to path traversal. A malicious user may potentially exploit this vulnerability ...

CVE-2022-24774

CVE-2022-24774 affects CycloneDX BOM Repository Server prior to version 2.0.1, due to improper input validation that enables path traversal. An attacker could potentially create arbitrary directories or cause a denial of service by deleting directories. The issue is fixed in version 2.0.1. Under ...

CVE-2022-24774

CycloneDX BOM Repository Server is a bill of materials BOM repository server for distributing CycloneDX BOMs. CycloneDX BOM Repository Server before version 2.0.1 has an improper input validation vulnerability leading to path traversal. A malicious user may potentially exploit this vulnerability ...

CVE-2022-24774 Improper Input Validation leading to Path Traversal in CycloneDX BOM Repository Server

CycloneDX BOM Repository Server is a bill of materials BOM repository server for distributing CycloneDX BOMs. CycloneDX BOM Repository Server before version 2.0.1 has an improper input validation vulnerability leading to path traversal. A malicious user may potentially exploit this vulnerability ...

CVE-2022-24774 Improper Input Validation leading to Path Traversal in CycloneDX BOM Repository Server

CycloneDX BOM Repository Server is a bill of materials BOM repository server for distributing CycloneDX BOMs. CycloneDX BOM Repository Server before version 2.0.1 has an improper input validation vulnerability leading to path traversal. A malicious user may potentially exploit this vulnerability ...

CVE-2022-24774: Improper Input Validation

CycloneDX BOM Repository Server is a bill of materials BOM repository server for distributing CycloneDX BOMs. CycloneDX BOM Repository Server before version 2.0.1 has an improper input validation vulnerability leading to path traversal. A malicious user may potentially exploit this vulnerability ...

CycloneDX BOM Repository Server path traversal vulnerability

CycloneDX BOM Repository Server is a BOM repository server. It is used to distribute CycloneDX BOMs. A path traversal vulnerability exists in CycloneDX BOM Repository Server versions prior to 2.0.1, which stems from incorrect input validation leading to path traversal issues. An attacker can use...

com.wavefront:proxy-test (>=999.0-rc3, <=9999.0), com.wavefront:proxy-test-2 (>=999.0, <=999.7) potentially affected by CVE-2020-14326 via org.jboss.resteasy:resteasy-bom (3.13.0.final)

org.jboss.resteasy:resteasy-bom MAVEN version 3.13.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-bom and may be impacted: - com.wavefront:proxy-test =999.0-rc3, =999.0, =999.7 Source cves: CVE-2020-14326 Source...

com.wavefront:proxy (>=11.0-rc3, <=11.0) potentially affected by CVE-2020-14326 via org.jboss.resteasy:resteasy-bom (3.13.2.final)

org.jboss.resteasy:resteasy-bom MAVEN version 3.13.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.resteasy:resteasy-bom and may be impacted: - com.wavefront:proxy =11.0-rc3, =11.0 Source cves: CVE-2020-14326 Source advisory:...

About the security content of macOS Big Sur 11.6.5

About the security content of macOS Big Sur 11.6.5 This document describes the security content of macOS Big Sur 11.6.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

cn.hutool:hutool-bom (4.6.5) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.5)

cn.hutool:hutool-http MAVEN version 4.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-bom 4.6.5 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...

cn.hutool:hutool-bom (4.6.14) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.14)

cn.hutool:hutool-http MAVEN version 4.6.14 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-bom 4.6.14 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...

cn.hutool:hutool-all (4.6.0), cn.hutool:hutool-bom (4.6.0) +1 more potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.0)

cn.hutool:hutool-http MAVEN version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-all 4.6.0 - cn.hutool:hutool-bom 4.6.0 - me.zhyd.oauth:justauth 1.9.3 Source cves: CVE-2022-22885...

cn.hutool:hutool-bom (4.6.3) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.3)

cn.hutool:hutool-http MAVEN version 4.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-bom 4.6.3 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...

cn.hutool:hutool-bom (4.6.4) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.4)

cn.hutool:hutool-http MAVEN version 4.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-bom 4.6.4 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...

cn.hutool:hutool-bom (4.6.6), com.github.javen205:ijpay (2.2.1) +6 more potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.6)

cn.hutool:hutool-http MAVEN version 4.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-bom 4.6.6 - com.github.javen205:ijpay 2.2.1 - com.github.javen205:ijpay-alipay 2.2.1 -...

cn.hutool:hutool-bom (4.6.7), cn.virens:virens-utils-common (1.4.1) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.7)

cn.hutool:hutool-http MAVEN version 4.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-bom 4.6.7 - cn.virens:virens-utils-common 1.4.1 Source cves: CVE-2022-22885 Source advisory:...

cn.hutool:hutool-bom (4.6.11) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.11)

cn.hutool:hutool-http MAVEN version 4.6.11 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-bom 4.6.11 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...

cn.hutool:hutool-bom (4.6.12) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.12)

cn.hutool:hutool-http MAVEN version 4.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-bom 4.6.12 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...

cn.hutool:hutool-bom (4.6.13) potentially affected by CVE-2022-22885 via cn.hutool:hutool-http (4.6.13)

cn.hutool:hutool-http MAVEN version 4.6.13 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-http and may be impacted: - cn.hutool:hutool-bom 4.6.13 Source cves: CVE-2022-22885 Source advisory: OSV:GHSA-P7W9-8MXW-P3G7...