CVE-2021-32624

Keystone 5 is an open source CMS platform to build Node.js applications. This security advisory relates to a newly discovered capability in our query infrastructure to directly or indirectly expose the values of private fields, bypassing the configured access control. This is an access control...

CVE-2021-32624

CVE-2021-32624 concerns Keystone 5, where a flaw in the query infrastructure can bypass read access control to expose private field values or metadata. The attacker can reveal information from private fields or lists, via an access-control related oracle attack; complexity is length-dependent and...

Keystone-5: Information leakage vulnerability

Keystone-5 is open source an extensible platform . It is used to rapidly create highly customizable CMS and APIs. is a complete re-imagining of the future of KeystoneJS. Keystone-5 suffers from an information disclosure vulnerability that can directly or indirectly disclose the value of a private...

PT-2021-19816

Name of the Vulnerable Software and Affected Versions Keystone 5 affected versions not specified Description This issue relates to a newly discovered capability in the query infrastructure to directly or indirectly expose the values of private fields, bypassing the configured access control. It i...

CVE-2021-32624: Exposure of Sensitive Information to an Unauthorized Actor

Keystone 5 is an open source CMS platform to build Node.js applications. This security advisory relates to a newly discovered capability in our query infrastructure to directly or indirectly expose the values of private fields, bypassing the configured access control. This is an access control...

CVE-2021-3563

A flaw was found in openstack-keystone. Only the first 72 characters of an application secret are verified allowing attackers bypass some password complexity which administrators may be counting on. The highest threat from this vulnerability is to data confidentiality and integrity...

keystone:fuzz_asm_hex: Object-size in llvm_ks::MCInstrInfo::getName

Project: https://github.com/keystone-engine/keystone.git Detailed Report: https://oss-fuzz.com/testcase?key=5130772761673728 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmhex Job Type: libfuzzerubsankeystone Platform Id: linux Crash Type: Object-size Crash Address: Crash State:...

Virtuozzo Hybrid Infrastructure 4.5 (4.5.0-284)

In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance the end-user experience and service providers' interoperability. The improvements cover compute services, networking, storage core, monitoring, and the administrative user interface. Additionally,...

keystone:fuzz_asm_mips64be: Segv on unknown address in llvm_ks::StringRef::operator

Project: https://github.com/keystone-engine/keystone.git Detailed Report: https://oss-fuzz.com/testcase?key=5674750133272576 Project: keystone Fuzzing Engine: afl Fuzz Target: fuzzasmmips64be Job Type: aflasankeystone Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...

keystone:fuzz_asm_hex: Global-buffer-overflow in llvm_ks::StringRef::find_last_not_of

Detailed Report: https://oss-fuzz.com/testcase?key=5791154434080768 Project: keystone Fuzzing Engine: afl Fuzz Target: fuzzasmhex Job Type: aflasankeystone Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000000beb45f Crash State: llvmks::StringRef::findlastnotof...

keystone:fuzz_asm_x86_64: Use-of-uninitialized-value in X86AsmParser::ParseIntelOperand

Detailed Report: https://oss-fuzz.com/testcase?key=5120554547937280 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmx8664 Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: X86AsmParser::ParseIntelOperand...

keystone:fuzz_asm_sparcbe: Invalid-free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImpl

Project: https://github.com/keystone-engine/keystone.git Detailed Report: https://oss-fuzz.com/testcase?key=5664329452093440 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmsparcbe Job Type: libfuzzerasankeystone Platform Id: linux Crash Type: Invalid-free Crash Address:...

keystone:fuzz_asm_x86_16: Use-of-uninitialized-value in llvm_ks::APFloat::convertDoubleAPFloatToAPInt

Detailed Report: https://oss-fuzz.com/testcase?key=5146908970582016 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmx8616 Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

keystone:fuzz_asm_sparc64be: Invalid-free in llvm_ks::MCFragment::destroy

Project: https://github.com/keystone-engine/keystone.git Detailed Report: https://oss-fuzz.com/testcase?key=4678131216678912 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmsparc64be Job Type: libfuzzerasankeystone Platform Id: linux Crash Type: Invalid-free Crash Address:...

keystone:fuzz_asm_x86_32: Use-of-uninitialized-value in X86AsmParser::ParseOperand

Detailed Report: https://oss-fuzz.com/testcase?key=5747156956872704 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmx8632 Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: X86AsmParser::ParseOperand...

keystone:fuzz_asm_x86_64: Bad-cast to llvm_ks::X86Operand from invalid vptr in X86AsmParser::MatchAndEmitATTInstruction

Detailed Report: https://oss-fuzz.com/testcase?key=5091846072827904 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmx8664 Job Type: libfuzzerubsankeystone Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003580620 Crash State: Bad-cast to llvmks::X86Operand from invalid...

keystone:fuzz_asm_arm64_arm: Use-of-uninitialized-value in llvm_ks::APFloat::convertDoubleAPFloatToAPInt

Detailed Report: https://oss-fuzz.com/testcase?key=5321231467413504 Project: keystone Fuzzing Engine: libFuzzer Fuzz Target: fuzzasmarm64arm Job Type: libfuzzermsankeystone Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

keystone (>=12.0.2, <=13.0.4) potentially affected by CVE-2021-21239 via pysaml2 (4.0.2)

pysaml2 PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - keystone =12.0.2, =13.0.4 Source cves: CVE-2021-21239 Source advisory: OSV:PYSEC-2021-49...

keystone (>=12.0.2, <=13.0.4) potentially affected by CVE-2021-21238 via pysaml2 (4.0.2)

pysaml2 PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - keystone =12.0.2, =13.0.4 Source cves: CVE-2021-21238 Source advisory: OSV:PYSEC-2021-48...

keystone (>=12.0.2, <=13.0.4) potentially affected by CVE-2021-21239 via pysaml2 (4.0.2)

pysaml2 PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - keystone =12.0.2, =13.0.4 Source cves: CVE-2021-21239 Source advisory: OSV:GHSA-5P3X-R448-PC62...