1745 matches found
com.silicolife.textmining:core (>=1.0.3, <=1.1.0), org.ff4j:ff4j-security-spring (>=1.8.2, <=1.8.7) +24 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.1.5.release)
org.springframework.security:spring-security-core MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.silicolife.textmining:core =1.0.3, =1.8.2, =1.8.7...
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the 1 service...
GHSA-9FC5-Q25C-R2WR Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
A URL parameter injection vulnerability was found in the back-channel ticket validation step of the CAS protocol in Jasig Java CAS Client before 3.3.2, .NET CAS Client before 1.0.2, and phpCAS before 1.3.3 that allow remote attackers to inject arbitrary web script or HTML via the 1 service...
org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2016-3723 via org.jenkins-ci.main:jenkins-core (1.470)
org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...
org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2017-1000356 via org.jenkins-ci.main:jenkins-core (1.470)
org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...
GHSA-F8R7-7HV9-7F43 Jenkins CAS Plugin Server-Side Request Forgery vulnerability
A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL. Additionally, this form validation method did not require POST requests,...
Jenkins CAS Plugin Server-Side Request Forgery vulnerability
A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL. Additionally, this form validation method did not require POST requests,...
org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2018-1999006 via org.jenkins-ci.main:jenkins-core (1.470)
org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...
org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2018-1999045 via org.jenkins-ci.main:jenkins-core (1.470)
org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...
org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2018-1999042 via org.jenkins-ci.main:jenkins-core (1.470)
org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...
org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2018-1999046 via org.jenkins-ci.main:jenkins-core (1.470)
org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...
org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2018-1000862 via org.jenkins-ci.main:jenkins-core (1.470)
org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...
org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2017-1000399 via org.jenkins-ci.main:jenkins-core (1.470)
org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...
org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2018-1000407 via org.jenkins-ci.main:jenkins-core (1.470)
org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...
org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2018-1000997 via org.jenkins-ci.main:jenkins-core (1.470)
org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...
org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2018-1000169 via org.jenkins-ci.main:jenkins-core (1.470)
org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...
org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2018-1999047 via org.jenkins-ci.main:jenkins-core (1.470)
org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...
org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2018-1999043 via org.jenkins-ci.main:jenkins-core (1.470)
org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...
org.jenkins-ci.main:jenkins-test-harness (1.470), org.jenkins-ci.main:jenkins-war (1.470) +5 more potentially affected by CVE-2018-1000408 via org.jenkins-ci.main:jenkins-core (1.470)
org.jenkins-ci.main:jenkins-core MAVEN version 1.470 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.470 - org.jenkins-ci.main:jenkins-war 1.470 -...
io.github.johnjcool:keycloak-cas-services (>=4.1.0.final, <=4.3.1.final), org.keycloak:keycloak-dependencies-server-min (>=4.0.0.beta1, <=4.3.0.final) +3 more potentially affected by CVE-2018-10894 via org.keycloak:keycloak-services (>=4.0.0.beta1, <=4.3.0.final)
org.keycloak:keycloak-services MAVEN version =4.0.0.beta1, =4.1.0.final, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.0.0.beta1, =4.3.0.final Source cves: CVE-2018-10894 Source advisory: GHSA-XVV8-8WH9-9FH2...