CVE-2024-31851

CVE-2024-31851 – Path traversal in CData Sync (Java, embedded Jetty) Affected software: CData Sync Java edition prior to 23.4.8843 running with the embedded Jetty server. Vulnerability: Path traversal vulnerability allowing an unauthenticated remote attacker to access sensitive information and pe...

CVE-2024-31850

A path traversal vulnerability exists in the Java version of CData Arc 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions...

CVE-2024-31850

CVE-2024-31850 affects CData Arc prior to 23.4.8839 (Java version) running with embedded Jetty. A path traversal flaw can let an unauthenticated remote attacker access sensitive information and perform limited actions via crafted HTTP requests. Root cause described as errors in handling relative ...

CVE-2024-31850

A path traversal vulnerability exists in the Java version of CData Arc 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions...

CVE-2024-31849

CVE-2024-31849 – Path traversal in CData Connect (Java)" Affected: CData Connect Java versions prior to 23.4.8846 when using the embedded Jetty server. Vulnerability: Path traversal could let an unauthenticated remote attacker gain complete administrative access to the application. Impact: High —...

CVE-2024-31849

A path traversal vulnerability exists in the Java version of CData Connect 23.4.8846 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application...

CVE-2024-31849

A path traversal vulnerability exists in the Java version of CData Connect 23.4.8846 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application...

CVE-2024-31848

A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application...

CVE-2024-31848

A path traversal vulnerability exists in the Java version of CData API Server 23.4.8844 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain complete administrative access to the application...

CVE-2024-31848

CVE-2024-31848 affects the Java version of CData API Server

CData Sync 安全漏洞

CData Sync is a data synchronization tool from CData Corporation designed to help users synchronize and migrate data between different data sources. A security vulnerability exists in CData Sync versions prior to 23.4.8843 that stems from the presence of a path traversal vulnerability. An attacke...

CData Arc 安全漏洞

CData Arc is a new data connectivity platform from CData Corporation designed to help organizations enable data-driven decision making and innovation. A security vulnerability exists in CData Arc versions prior to 23.4.8839 that stems from the presence of a path traversal vulnerability. An attack...

CData API Server 安全漏洞

CData API Server is a server for creating, deploying, and managing custom APIs from CData. This server provides a highly scalable platform that helps organizations quickly build and expose APIs to communicate with different data sources. A security vulnerability exists in versions prior to CData...

CData Connect 安全漏洞

CData Connect is a powerful data connectivity platform from CData Corporation designed to help organizations easily access, integrate and analyze a variety of data sources. A security vulnerability exists in CData Connect versions prior to 23.4.8846 that stems from the presence of a path traversa...

PT-2024-2869 · Cdata +1 · Cdata Arc +1

Name of the Vulnerable Software and Affected Versions: CData Arc versions prior to 23.4.8839 Description: A path traversal vulnerability exists in the Java version of CData Arc when running using the embedded Jetty server. This could allow an unauthenticated remote attacker to gain access to...

PT-2024-2870 · Cdata +1 · Cdata Sync +1

Name of the Vulnerable Software and Affected Versions: CData Sync versions prior to 23.4.8843 Description: A path traversal vulnerability exists in the Java version of CData Sync when running using the embedded Jetty server. This issue is related to errors in handling relative paths to directorie...

PT-2024-2868 · Cdata +1 · Cdata Connect +1

Name of the Vulnerable Software and Affected Versions: CData Connect versions prior to 23.4.8846 Description: A path traversal vulnerability exists in the Java version of CData Connect when running using the embedded Jetty server. This could allow an unauthenticated remote attacker to gain comple...

PT-2024-2856 · Cdata +1 · Cdata Api Server +1

Name of the Vulnerable Software and Affected Versions: CData API Server versions prior to 23.4.8844 Description: A path traversal vulnerability exists in the Java version of CData API Server when running using the embedded Jetty server. This could allow an unauthenticated remote attacker to gain...

DRUPAL-CONTRIB-2024-009

The CKEditor 4 LTS - WYSIWYG HTML editor module uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that on certain configurations may impact the Drupal module that bundles and integrates this code. The vulnerability is mitigated by the fact it requires: 1...

CKEditor 4 LTS - WYSIWYG HTML editor - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-009

The CKEditor 4 LTS - WYSIWYG HTML editor module uses the CKEditor library for WYSIWYG editing. CKEditor has released a security update that on certain configurations may impact the Drupal module that bundles and integrates this code. The vulnerability is mitigated by the fact it requires: full-pa...