org.springframework.cloud:spring-cloud-starter-hystrix-dashboard (1.0.4.release) potentially affected by CVE-2021-22053 via org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard (1.0.4.release)

org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard MAVEN version 1.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard and may be impacted: -...

org.springframework.cloud:spring-cloud-starter-hystrix-dashboard (1.4.6.release), org.springframework.cloud:spring-cloud-starter-netflix-hystrix-dashboard (1.4.6.release) potentially affected by CVE-2021-22053 via org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard (1.4.6.release)

org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard MAVEN version 1.4.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard and may be impacted: -...

com.brinkus.labs:labs-cloud-starter-service (>=1.1.0, <=1.4.0) potentially affected by CVE-2021-22053 via org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard (1.1.5.release)

org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard MAVEN version 1.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard and may be impacted: -...

org.springframework.cloud:spring-cloud-starter-hystrix-dashboard (1.3.2.release) potentially affected by CVE-2021-22053 via org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard (1.3.2.release)

org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard and may be impacted: -...

org.springframework.cloud:spring-cloud-starter-hystrix-dashboard (1.0.1.release) potentially affected by CVE-2021-22053 via org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard (1.0.1.release)

org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard MAVEN version 1.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard and may be impacted: -...

org.springframework.cloud:spring-cloud-starter-hystrix-dashboard (1.3.4.release) potentially affected by CVE-2021-22053 via org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard (1.3.4.release)

org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard MAVEN version 1.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard and may be impacted: -...

com.brinkus.labs:labs-cloud-starter-service (>=1.5.0, <=1.5.1) potentially affected by CVE-2021-22053 via org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard (1.2.5.release)

org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard MAVEN version 1.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard and may be impacted: -...

com.brinkus.labs:labs-cloud-starter-service (1.6.1), org.springframework.cloud:spring-cloud-starter-hystrix-dashboard (1.3.5.release) potentially affected by CVE-2021-22053 via org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard (1.3.5.release)

org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard MAVEN version 1.3.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard and may be impacted: -...

org.springframework.cloud:spring-cloud-starter-hystrix-dashboard (1.0.2.release) potentially affected by CVE-2021-22053 via org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard (1.0.2.release)

org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard MAVEN version 1.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard and may be impacted: -...

org.springframework.cloud:spring-cloud-starter-hystrix-dashboard (1.4.5.release), org.springframework.cloud:spring-cloud-starter-netflix-hystrix-dashboard (1.4.5.release) potentially affected by CVE-2021-22053 via org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard (1.4.5.release)

org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard MAVEN version 1.4.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard and may be impacted: -...

org.springframework.cloud:spring-cloud-starter-hystrix-dashboard (1.3.6.release) potentially affected by CVE-2021-22053 via org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard (1.3.6.release)

org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard MAVEN version 1.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard and may be impacted: -...

org.springframework.cloud:spring-cloud-starter-hystrix-dashboard (1.4.3.release), org.springframework.cloud:spring-cloud-starter-netflix-hystrix-dashboard (1.4.3.release) potentially affected by CVE-2021-22053 via org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard (1.4.3.release)

org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard MAVEN version 1.4.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.cloud:spring-cloud-netflix-hystrix-dashboard and may be impacted: -...

CVE-2021-22053

Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at /hystrix/monitor;user-provided data, the path elements following...

Design/Logic Flaw

Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at /hystrix/monitor;user-provided data, the path elements following...

CVE-2021-22053

Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at /hystrix/monitor;user-provided data, the path elements following...

CVE-2021-22053

Applications using both "spring-cloud-netflix-hystrix-dashboard" and "spring-boot-starter-thymeleaf" expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at "/hystrix/monitor;user-provided data", the path elements...

PT-2021-14848

Name of the Vulnerable Software and Affected Versions spring-cloud-netflix-hystrix-dashboard versions affected versions not specified Description The issue affects applications that use both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf. It exposes a way to execute code...

CVE-2021-22053: Improper Control of Generation of Code

Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at /hystrix/monitor;user-provided data, the path elements following...

Over 1 Million Sites Impacted by Vulnerability in Starter Templates Plugin

On October 4, 2021, the Wordfence Threat Intelligence team initiated the responsible disclosure process for the Starter Templates plugin, which is installed on over 1 Million WordPress websites. The full name of the WordPress plugin is “Starter Templates — Elementor, Gutenberg & Beaver Builder...

WordPress Starter Templates plugin <= 2.7.0 - Authenticated Block Import leading to Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Block Import leading to Stored Cross-Site Scripting XSS vulnerability discovered by Ramuel Gall in WordPress Starter Templates plugin versions = 2.7.0. Solution Update the WordPress Starter Templates plugin to the latest available version at least 2.7.1...