ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +11636 more potentially affected by CVE-2021-37533 via commons-net:commons-net (>=3.0, <=3.8.0)

commons-net:commons-net MAVEN version =3.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =1.2.10 and more Source cves: CVE-2021-37533 Source advisory: GHSA-CGP8-4M63-FHH5...

io.github.gferrariuy:axis-rt-transport-mail (1.4.1.1), io.github.gferrariuy:axis1-maintained (1.4.1.1) +1 more potentially affected by CVE-2021-37533 via commons-net:commons-net (1.0.0)

commons-net:commons-net MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on commons-net:commons-net and may be impacted: - io.github.gferrariuy:axis-rt-transport-mail 1.4.1.1 - io.github.gferrariuy:axis1-maintained 1.4.1.1 -...

maven:maven-artifact-plugin (>=1.4, <=1.6), maven:maven-site-plugin (>=1.5.1, <=1.6) +5 more potentially affected by CVE-2021-37533 via commons-net:commons-net (1.1.0)

commons-net:commons-net MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on commons-net:commons-net and may be impacted: - maven:maven-artifact-plugin =1.4, =1.5.1, =1.0-alpha-2, =2.9.0-b03, =0.0.1, =20040825.211642, =20040825.214656...

maven:maven-announcement-plugin (1.3) potentially affected by CVE-2021-37533 via commons-net:commons-net (1.2.1)

commons-net:commons-net MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on commons-net:commons-net and may be impacted: - maven:maven-announcement-plugin 1.3 Source cves: CVE-2021-37533 Source advisory: OSV:GHSA-CGP8-4M63-FHH5...

com.github.yungyu16.toolkit:toolkit-common (1.0.0), com.github.yungyu16.toolkit:toolkit-core (>=1.0.3, <=3.0.0) +1 more potentially affected by CVE-2021-37533 via commons-net:commons-net (1.2.2)

commons-net:commons-net MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on commons-net:commons-net and may be impacted: - com.github.yungyu16.toolkit:toolkit-common 1.0.0 - com.github.yungyu16.toolkit:toolkit-core =1.0.3, =1.0.4, =3.0....

com.github.goldin:about-maven-plugin (>=0.2.4, <=0.2.5), com.github.goldin:assert-maven-plugin (>=0.2.4, <=0.2.5) +36 more potentially affected by CVE-2021-37533 via commons-net:commons-net (1.4.0)

commons-net:commons-net MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on commons-net:commons-net and may be impacted: - com.github.goldin:about-maven-plugin =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4, =0.2.4,...

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +11636 more potentially affected by CVE-2021-37533 via commons-net:commons-net (>=3.0, <=3.8.0)

commons-net:commons-net MAVEN version =3.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =1.2.10 and more Source cves: CVE-2021-37533 Source advisory: OSV:GHSA-CGP8-4M63-FHH5...

GHSA-CGP8-4M63-FHH5 Apache Commons Net vulnerable to information leakage via malicious server

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

Apache Commons Net vulnerable to information leakage via malicious server

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

CVE-2021-37533

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

DEBIAN-CVE-2021-37533

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

CVE-2021-37533

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

Design/Logic Flaw

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

CVE-2021-37533

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

UBUNTU-CVE-2021-37533

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

CVE-2021-37533

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

acegisecurity:acegi-security (>=0.8.2, <=0.9.0), acegisecurity:acegi-security-cas (0.9.0) +13881 more potentially affected by CVE-2021-37533 via commons-net:commons-net (>=1.0.0, <=3.8.0)

commons-net:commons-net MAVEN version =1.0.0, =0.8.2, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =1.2.7 and more Source cves: CVE-2021-37533 Source advisory: MEND:CVE-2021-37533...

CVE-2021-37533

CVE-2021-37533 affects the Apache Commons Net FTP client prior to 3.9.0, where the FTP PASV response can cause the client to trust a host from the server. This could lead to leakage of information about services on the client’s private network if a malicious server is involved. The advisory notes...

CVE-2021-37533: Improper Input Validation

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...

CVE-2021-37533 Apache Commons Net's FTP client trusts the host from PASV response by default

Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about...