CVE-2023-21838

The CVE-2023-21838 entry affects Oracle WebLogic Server (Fusion Middleware Core) with versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. The issue is due to insufficient input validation in the Core component, allowing an unauthenticated attacker with network access via T3 or IIOP to trigger a hang...

CVE-2023-21839

CVE-2023-21839 affects Oracle WebLogic Server (core) versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. It is exploitable via unauthenticated network access over T3/IIOP and relates to post-deserialization of a ForeignOpaqueReference object, enabling remote code execution as the oracle user. Multip...

CVE-2023-21832

CVE-2023-21832 affects Oracle BI Publisher (Oracle Fusion Middleware Security). Vulnerable in affected versions: 5.9.0.0.0, 6.4.0.0.0, and 12.2.1.4.0. Public sources consistently describe it as an easily exploitable, network-access vulnerability with the potential for takeover of Oracle BI Publis...

Open Redirect

oidc-middleware is vulnerable to open redirect. The vulnerability exists because the ensureAuthenticated function of oidcUtil.js does not properly validate the request URLs, allowing an attacker to redirect the user to malicious URLs...

CVE-2022-3145

An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL...

Open redirect

An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL...

CVE-2022-3145

An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL...

Okta NodeJS OIDC Middleware 输入验证错误漏洞

Okta NodeJS OIDC Middleware is an Okta open source OIDC support for Fortran applications. A security vulnerability exists in Okta NodeJS OIDC Middleware versions prior to 5.0.0, which stems from the presence of an open redirection vulnerability that allows an attacker to redirect a user to an...

CVE-2022-3145

CVE-2022-3145 affects Okta OIDC Middleware before 5.0.0. The root cause is an open redirect due to insufficient validation of redirect URLs in the authentication flow (e.g., ensureAuthenticated). This enables an attacker to redirect users to arbitrary, attacker-controlled URLs after login. Remedi...

@okta/oidc-middlewareOpen Redirect vulnerability

An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL. Affected products and versions Okta OIDC Middleware prior to version 5.0.0. Resolution The vulnerability is fixed in OIDC Middleware 5.0.0. To remediat...

GHSA-58H4-9M7M-J9M4 @okta/oidc-middlewareOpen Redirect vulnerability

An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL. Affected products and versions Okta OIDC Middleware prior to version 5.0.0. Resolution The vulnerability is fixed in OIDC Middleware 5.0.0. To remediat...

PT-2023-13036 · Okta · Okta Oidc Middleware

Name of the Vulnerable Software and Affected Versions: Okta OIDC Middleware versions prior to 5.0.0 Description: An open redirect issue exists, allowing an attacker to redirect a user to an arbitrary URL. To exploit this, an attacker would need to send a victim a malformed URL containing a target...

Artaxerxes 信息泄露漏洞

Artaxerxes is an Evolution Events open source evolutionary event information system. Artaxerxes suffers from an information disclosure vulnerability that stems from unknown code in the arta/common/middleware.py file of its POST Parameter Handler component that manipulates the parameter password...

PT-2023-15885 · Unknown · Evolution Events Artaxerxes

Name of the Vulnerable Software and Affected Versions: Evolution Events Artaxerxes affected versions not specified Description: A vulnerability was found in the component POST Parameter Handler, affecting unknown code of the file arta/common/middleware.py. The manipulation of the password argumen...

Important: Red Hat Bug Fix Advisory: updated RHEL-8 based Middleware Containers container images

Updated RHEL-8 based Middleware Containers container images are now available The RHEL-8 based Middleware Containers container images have been updated to address the following security advisory: RHSA-2022:9058 see References Users of RHEL-8 based Middleware Containers container images are advise...

CVE-2020-36567

A flaw was found in gin. This issue occurs when the default Formatter for the Logger middleware LoggerConfig.Formatter, which is included in the Default engine, allows attackers to inject arbitrary log entries by manipulating the request path...

handlers 访问控制错误漏洞

handlers is an open source collection of useful middleware for HTTP services and web applications from Gorilla Web Toolkit. A security vulnerability exists in handlers, which stems from a CORS handler that uses incorrect CORS headers...

This Week in Spring - December 6th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you? You know what Ive wanted to do? See my friends on the Spring team in person since the pandemic descended. And, Im overjoyed to relate, Ive just had the privilege of a nice meeting with several of them last night...

[SECURITY] Fedora 35 Update: libetpan-1.9.4-9.fc35

The purpose of this mail library is to provide a portable, efficient middle-w are for different kinds of mail access. When using the drivers interface, the interface is the same for all kinds of mail access, remote and local mailboxe s...

[SECURITY] Fedora 37 Update: libetpan-1.9.4-9.fc37

The purpose of this mail library is to provide a portable, efficient middle-w are for different kinds of mail access. When using the drivers interface, the interface is the same for all kinds of mail access, remote and local mailboxe s...