Lucene search
+L

1527 matches found

osv_debian
osv_debian
•added 2024/12/04 9:15 p.m.•14 views

DEBIAN-CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS4.9AI score0.00368EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/12/04 9:15 p.m.•17 views

UBUNTU-CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS6.5AI score0.00368EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2024/12/04 9:06 p.m.•45 views

CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS4.9AI score0.00368EPSS
SaveExploits0
CVE
CVE
•added 2024/12/04 9:06 p.m.•362 views

CVE-2024-38829

CVE-2024-38829 is described as a vulnerability in Spring LDAP that enables data exposure due to case-sensitive comparisons. The issue affects Spring LDAP versions ranging from the earliest releases up to 2.4.3, and then 3.0.0–3.0.9, 3.1.0–3.1.7, and 3.2.0–3.2.7, including all versions prior to 2....

3.7CVSS3.8AI score0.00368EPSS
SaveExploits0References1
Mend
Mend
•added 2024/12/04 9:06 p.m.•9 views

CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

6.3CVSS0.00368EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/12/04 9:06 p.m.•53 views

CVE-2024-38829 Spring LDAP sensitive data exposure for case-sensitive comparisons

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS0.00368EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2024/12/02 9:20 p.m.•36 views

CVE-2024-38827

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

4.8CVSS6.7AI score0.00377EPSS
SaveExploits0References4
osv_ghsa
osv_ghsa
•added 2024/12/02 5:26 p.m.•30 views

GHSA-9R9M-FFP6-9X4V vue-i18n has cross-site scripting vulnerability with prototype pollution

Vulnerability type XSS Description vue-i18n can be passed locale messages to createI18n or useI18n. we can then translate them using t and $t. vue-i18n has its own syntax for local messages, and uses a message compiler to generate AST. In order to maximize the performance of the translation...

5.3CVSS5.9AI score0.00674EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/12/02 5:26 p.m.•65 views

vue-i18n has cross-site scripting vulnerability with prototype pollution

Vulnerability type XSS Description vue-i18n can be passed locale messages to createI18n or useI18n. we can then translate them using t and $t. vue-i18n has its own syntax for local messages, and uses a message compiler to generate AST. In order to maximize the performance of the translation...

5.3CVSS6.1AI score0.00674EPSS
SaveExploits0References5Affected Software5
osv_ghsa
osv_ghsa
•added 2024/12/02 3:31 p.m.•27 views

GHSA-Q3V6-HM2V-PW99 Spring Framework has Authorization Bypass for Case Sensitive Comparisons

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

6.3CVSS5.9AI score0.00377EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2024/12/02 3:31 p.m.•127 views

Spring Framework has Authorization Bypass for Case Sensitive Comparisons

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

4.8CVSS6.8AI score0.00377EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2024/12/02 3:15 p.m.•35 views

CVE-2024-38827

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

4.8CVSS0.00377EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/12/02 2:32 p.m.•39 views

CVE-2024-38827 Spring Security Authorization Bypass for Case Sensitive Comparisons

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

4.8CVSS6.9AI score0.00377EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/02 2:32 p.m.•80 views

CVE-2024-38827 Spring Security Authorization Bypass for Case Sensitive Comparisons

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

4.8CVSS0.00377EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/02 2:32 p.m.•389 views

CVE-2024-38827

CVE-2024-38827 (IBM Controller) is described as a locale-dependent issue in String.toLowerCase()/toUpperCase() that could cause authorization rules to bypass. Affected product/version: IBM Controller 11.1.0–11.1.1. Remediation: upgrade to IBM Controller 11.1.2 (per IBM bulletin). Connected docs p...

4.8CVSS5.2AI score0.00377EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/02 12:00 a.m.•6 views

CVE-2024-38827: Authorization Bypass Through User-Controlled Key

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

4.8CVSS5.8AI score0.00377EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/29 6:32 p.m.•38 views

CVE-2024-52809 Cross-site Scripting vulnerability with prototype pollution in vue-i18n

vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...

5.3CVSS0.00674EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/11/29 12:00 a.m.•19 views

PT-2024-35457 · Vue-I18N · Vue-I18N

Name of the Vulnerable Software and Affected Versions: vue-i18n versions prior to 9.14.2 vue-i18n versions prior to 10.0.5 Description: The issue concerns a Cross-site Scripting XSS attack possibility in vue-i18n, an internationalization plugin for Vue.js. This occurs when locale message ASTs are...

5.3CVSS6.5AI score0.00674EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/29 12:00 a.m.•8 views

CVE-2024-52809: Improper Neutralization of Input During Web Page Generation

vue-i18n is an internationalization plugin for Vue.js. In affected versions vue-i18n can be passed locale messages to createI18n or useI18n. When locale message ASTs are generated in development mode there is a possibility of Cross-site Scripting attack. This issue has been addressed in versions...

5.3CVSS5.6AI score0.00674EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/29 12:00 a.m.•16 views

vue-i18n cross-site scripting vulnerabilities

vue-i18n is an application from intlify open source. A cross-site scripting vulnerability exists in vue-i18n, which stems from the fact that vue-i18n can pass locale information to createI18n or useI18n. When generating a locale information AST in development mode, this could lead to a cross-site...

5.3CVSS5.7AI score0.00674EPSS
SaveExploits0References3
Rows per page
Query Builder