CVE-2023-37924 Apache Submarine: SQL injection from unauthorized login

Apache Software Foundation Apache Submarine has an SQL injection vulnerability when a user logs in. This issue can result in unauthorized login. Now we have fixed this issue and now user must have the correct login to access workbench. This issue affects Apache Submarine: from 0.7.0 before...

PT-2023-7201 · Apache · Apache Submarine

Name of the Vulnerable Software and Affected Versions: Apache Submarine versions 0.7.0 through 0.7.x Description: The issue is related to an SQL injection vulnerability in Apache Submarine when a user logs in, potentially allowing a remote attacker to execute arbitrary SQL queries, resulting in...

@cdoor/core (>=0.0.1, <=0.0.3), @dci-lint/cmd-api-server (>=0.5.0, <=0.6.1) +39 more potentially affected by CVE-2022-36083 via jose (>=3.7.0, <=3.20.3)

jose NPM version =3.7.0, =0.0.1, =0.5.0, =0.5.0, =0.5.0, =0.1.0, =0.1.0, =0.0.3-3.12.3, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =1.8.2-feat1608-jose3-915162334-6607-1623076209.0, =8.1....