13 matches found
CVE-2026-105926
The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for a topic, and GetOrCreateSchema, which registers a new schema version for an existing topic. The broker handled both commands after checking only that the client connection was...
EUVD-2026-107423
The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for a topic, and GetOrCreateSchema, which registers a new schema version for an existing topic. The broker handled both commands after checking only that the client connection was...
CVE-2026-105926 Apache Pulsar: Missing Topic Authorization on Binary Protocol GetSchema and GetOrCreateSchema Commands
The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for a topic, and GetOrCreateSchema, which registers a new schema version for an existing topic. The broker handled both commands after checking only that the client connection was...
CVE-2026-105926
The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for a topic, and GetOrCreateSchema, which registers a new schema version for an existing topic. The broker handled both commands after checking only that the client connection was...
CVE-2026-105926 Apache Pulsar: Missing Topic Authorization on Binary Protocol GetSchema and GetOrCreateSchema Commands
The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for a topic, and GetOrCreateSchema, which registers a new schema version for an existing topic. The broker handled both commands after checking only that the client connection was...
CVE-2026-105926
The Apache Pulsar broker is vulnerable to missing authorization checks on specific binary protocol commands. Specifically, the GetSchema and GetOrCreateSchema commands fail to verify if an authenticated client has permissions for the target topic, namespace, or tenant. An attacker could use these...
Apache Pulsar authorization issue vulnerability
Versions of Apache Pulsar from 2.2.0 up to and including 4.0.14, from 4.1.0 up to and including 4.1.3, and from 4.2.0 up to and including 4.2.5 contain an authorization issue vulnerability. This vulnerability arises because the GetSchema and GetOrCreateSchema commands only verify the client’s...
PT-2026-120724
The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for a topic, and GetOrCreateSchema, which registers a new schema version for an existing topic. The broker handled both commands after checking only that the client connection was...
CVE-2026-104141 DataEase: SQL Injection in datasource metadata identifiers
DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata operations, including getSchema, validate, save, and update flows. CalciteProvid...
CVE-2026-104141
The open-source data visualization tool DataEase contains a SQL Injection vulnerability in its datasource metadata identifiers. Authenticated users with datasource access can provide crafted schema names, connection usernames, table names, or database names during metadata operations like getSche...
CVE-2026-104141 DataEase: SQL Injection in datasource metadata identifiers
DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or database names to datasource metadata operations, including getSchema, validate, save, and update flows. CalciteProvid...
OSV-2020-1047 UNKNOWN READ in arrow::ipc::internal::FieldFromFlatbuffer
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20123 Crash type: UNKNOWN READ Crash state: arrow::ipc::internal::FieldFromFlatbuffer arrow::ipc::internal::FieldFromFlatbuffer arrow::ipc::internal::GetSchema...
PT-2020-21670
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue. The crash state involves functions such as FieldFromFlatbuffer and GetSchema within the arrow::ipc::internal...