PT-2023-28595 · Oracle · Java

Name of the Vulnerable Software and Affected Versions: Redisson versions prior to 3.22.0 Description: The issue concerns a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some messages received from the Redis server contain Java objects that the client deserializes witho...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.99), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.99) +1 more potentially affected by CVE-2019-17569 via org.apache.tomcat.embed:tomcat-embed-core (7.0.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.99 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.99 -...

Information Disclosure

redisson is vulnerable to information disclosure. The vulnerability exists because the generated exception message in the LogHelper file using the function LogHelper.toString with single object as argument does not obscure radis password causing the sensitive information to be logged as plaintext...

nz.net.osnz.composite:composite-spring-boot-tomcat (1.2), org.apache.tomcat.embed:tomcat-embed-jasper (>=9.0.1, <=9.0.4) +2 more potentially affected by CVE-2018-1304 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =9.0.1, =9.0.1, =2.11.0, =3.8.2 Source cves: CVE-2018-1304 Source advisory: GHSA-6RXJ-58JH-436R...