CVE-2024-26308

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue...

CVE-2024-26308: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue...

Apache Commons Compress Security Vulnerability

Apache Commons Compress is an American Apache Apache Foundation library for processing compressed files. A security vulnerability exists in Apache Commons Compress versions 1.21 through prior to 1.26, which stems from unrestricted resource allocation...

com.hazelcast:hazelcast-client (3.2-rc2), com.hazelcast:hazelcast-cloud (3.2-rc2) +12 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (3.2-rc2)

com.hazelcast:hazelcast MAVEN version 3.2-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.2-rc2 - com.hazelcast:hazelcast-cloud 3.2-rc2 -...

Security Bulletin: A vulnerability in Apache Commons FileUpload affects IBM Tivoli Application Dependency Discovery Manager.

Summary Vulnerabilitiy in Apache Commons FileUpload affects IBM Tivoli Application Dependency Discovery Manager CVE-2023-24998. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the number of...

Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to a denial of service due to Apache Commons FileUpload

Summary This security bulletin addresses the vulnerabilitiy in IBM WebSphere Application Server Liberty that is vulnerable to a denial of service due to Apache Commons FileUpload CVE-2023-24998 Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are...

apache-commons-configuration:YAMLConfigurationReadFuzzer: Security exception in java.base/java.util.stream.AbstractPipeline.evaluate

Detailed Report: https://oss-fuzz.com/testcase?key=5125229607190528 Project: apache-commons-configuration Fuzzing Engine: libFuzzer Fuzz Target: YAMLConfigurationReadFuzzer Job Type: libfuzzerasanapache-commons-configuration Platform Id: linux Crash Type: Security exception Crash Address: Crash...

XWiki Component XSS

The vulnerability of the org.xwiki.commons:xwiki-commons-xml component of the XWiki platform, a web application development platform, stems from the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker, operating remotely, to carry out XSS...

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

Important: Red Hat Security Advisory: jenkins and jenkins-2-plugins security update

An update for jenkins and jenkins-2-plugins is now available for OpenShift Developer Tools and Services for OCP 4.13. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

cn.asany.chaos:jfantasy-commons (>=2.10.0, <=2.11.0), cn.asany.chaos:jfantasy-core (>=2.10.0, <=2.11.0) +36 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (8.16)

com.nimbusds:nimbus-jose-jwt MAVEN version 8.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - cn.asany.chaos:jfantasy-commons =2.10.0, =2.10.0, =2.10.0, =2.10.0, =5.9.0, =3.0.0, =3.0.0, =3.0.0,...

cn.itlym:shoulder-starter-auth-server (0.6), cn.itlym:shoulder-starter-auth-token (0.6) +22 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (8.21)

com.nimbusds:nimbus-jose-jwt MAVEN version 8.21 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - cn.itlym:shoulder-starter-auth-server 0.6 - cn.itlym:shoulder-starter-auth-token 0.6 -...

Exploit for Code Injection in Apache Commons_Text

Install maven - maven-linuxhttps://www.digitalocean.com/c...

apache-commons-validator:UrlValidator2Fuzzer: Security exception in java.base/java.util.regex.Pattern$Loop.match

Detailed Report: https://oss-fuzz.com/testcase?key=5168308332593152 Project: apache-commons-validator Fuzzing Engine: libFuzzer Fuzz Target: UrlValidator2Fuzzer Job Type: libfuzzerasanapache-commons-validator Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

apache-commons-net:OS400FTPEntryParserFuzzer: Security exception in java.base/java.util.regex.Pattern$BmpCharPropertyGreedy.match

Detailed Report: https://oss-fuzz.com/testcase?key=5165573512167424 Project: apache-commons-net Fuzzing Engine: libFuzzer Fuzz Target: OS400FTPEntryParserFuzzer Job Type: libfuzzerasanapache-commons-net Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

RHCOS 4 : OpenShift Container Platform 4.9.59 (RHSA-2023:1524)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:1524 advisory. - apache-commons-text: variable interpolation RCE CVE-2022-42889 Note that Nessus has not tested for this issue but has instead relied only o...

Apache Commons Text 1.9 Remote Code Execution Exploit

This Metasploit module exploit takes advantage of the StringSubstitutor interpolator class, which is included in the Commons Text library. A default interpolator allows for string lookups that can lead to remote code execution. This is due to a logic flaw that makes the script, dns and url lookup...