org.elasticsearch:elasticsearch-analysis-icu (0.15.0), org.elasticsearch:elasticsearch-cloud-aws (0.15.0) +11 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.15.0)

org.elasticsearch:elasticsearch MAVEN version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.15.0 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.14.4), org.elasticsearch:elasticsearch-cloud-aws (0.14.4) +10 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.14.4)

org.elasticsearch:elasticsearch MAVEN version 0.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.4 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.12.1), org.elasticsearch:elasticsearch-cloud-aws (0.12.1) +10 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.12.1)

org.elasticsearch:elasticsearch MAVEN version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.12.1 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.17.5), org.elasticsearch:elasticsearch-cloud-aws (0.17.5) +11 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (0.17.5)

org.elasticsearch:elasticsearch MAVEN version 0.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.5 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-groovy (1.6.1) potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (1.6.1)

org.elasticsearch:elasticsearch MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-groovy 1.6.1 Source cves: CVE-2024-23444 Source advisory:...

org.elasticsearch:elasticsearch-analysis-icu (0.13.1), org.elasticsearch:elasticsearch-cloud-aws (0.13.1) +10 more potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (0.13.1)

org.elasticsearch:elasticsearch MAVEN version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.13.1 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.14.1), org.elasticsearch:elasticsearch-cloud-aws (0.14.1) +10 more potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (0.14.1)

org.elasticsearch:elasticsearch MAVEN version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.1 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.14.2), org.elasticsearch:elasticsearch-cloud-aws (0.14.2) +10 more potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (0.14.2)

org.elasticsearch:elasticsearch MAVEN version 0.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.2 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.17.5), org.elasticsearch:elasticsearch-cloud-aws (0.17.5) +11 more potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (0.17.5)

org.elasticsearch:elasticsearch MAVEN version 0.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.5 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.18.2), org.elasticsearch:elasticsearch-cloud-aws (0.18.2) +11 more potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (0.18.2)

org.elasticsearch:elasticsearch MAVEN version 0.18.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.18.2 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.7.1), org.elasticsearch:elasticsearch-client-groovy (0.7.1) +3 more potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (0.7.1)

org.elasticsearch:elasticsearch MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.1 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.17.8), org.elasticsearch:elasticsearch-cloud-aws (0.17.8) +11 more potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (0.17.8)

org.elasticsearch:elasticsearch MAVEN version 0.17.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.8 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-groovy (1.6.1) potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (1.6.1)

org.elasticsearch:elasticsearch MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-groovy 1.6.1 Source cves: CVE-2023-49921 Source advisory:...

Hackers Exploiting Jenkins Script Console for Cryptocurrency Mining Attacks

Cybersecurity researchers have found that it's possible for attackers to weaponize improperly configured Jenkins Script Console instances to further criminal activities such as cryptocurrency mining. "Misconfigurations such as improperly set up authentication mechanisms expose the '/script'...

CVE-2024-37899

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an admin disables a user account, the user's profile is executed with the admin's rights. This allows a user to place malicious code in the user profile before getting an admin to disable...

PT-2024-4286

Name of the Vulnerable Software and Affected Versions XWiki Platform versions prior to 14.10.21 XWiki Platform versions prior to 15.5.5 XWiki Platform versions prior to 15.10.6 XWiki Platform versions prior to 16.0.0 Description The issue is related to incorrect privilege assignment in the XWiki...

CVE-2024-37899: Improper Control of Generation of Code

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an admin disables a user account, the user's profile is executed with the admin's rights. This allows a user to place malicious code in the user profile before getting an admin to disable...

OPENSUSE-SU-2024:10823-1 groovy-2.4.21-2.3 on GA media

These are all security issues fixed in the groovy-2.4.21-2.3 package on the GA media of openSUSE Tumbleweed...

jenkins-plugin/script-security: sandbox bypass via crafted constructor bodies

A sandbox bypass vulnerability was found in the Jenkins Script Security Plugin involving crafted constructor bodies, enabling the circumvention of security restrictions. With crafted constructor bodies, this flaw allows authenticated attackers to define and execute sandboxed scripts, including...

jenkins-plugin/script-security: sandbox bypass via sandbox-defined classes

A sandbox bypass vulnerability was found in the Jenkins Script Security Plugin within the sandbox-defined classes, enabling the circumvention of security restrictions. This flaw allows authenticated attackers to define and execute sandboxed scripts, including Pipelines, bypassing sandbox protecti...