167 matches found
Query predicate bypass in Zalando Skipper
In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request...
GHSA-QX2J-85Q5-FFP8 Query predicate bypass in Zalando Skipper
In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request...
CVE-2022-34296
In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request...
CVE-2022-34296
In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request...
Cross site request forgery (csrf)
In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request...
Skipper 安全漏洞
Skipper is an HTTP router and reverse proxy for service portfolios. A security vulnerability exists in Skipper versions prior to 0.13.218, which stems from a lack of valid filter escaping for application query predicates...
CVE-2022-34296
In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request...
CVE-2022-34296
CVE-2022-34296 affects the Zalando Skipper HTTP router/reverse proxy. In Skipper versions before 0.13.218, a flaw allows bypass of a query predicate via a prepared request, due to insufficient escaping/validation of application query predicates. This could enable an attacker to bypass predicate c...
CVE-2022-34296
In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request...
CVE-2022-34296
In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request...
PT-2022-22112 · Zalando · Zalando Skipper
Name of the Vulnerable Software and Affected Versions: Zalando Skipper versions prior to 0.13.218 Description: A query predicate could be bypassed via a prepared request. Recommendations: For versions prior to 0.13.218, update to version 0.13.218 or later to resolve the issue...
CVE-2022-34296: Undefined Security Weakness
In Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request...
CVE-2022-27262
An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file...
CVE-2022-27262
An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file...
Design/Logic Flaw
An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file...
CVE-2022-27262
An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file...
CVE-2022-27262
The CVE-2022-27262 entry concerns Skipper v0.9.1, where the file-upload module is vulnerable to arbitrary file upload that can lead to code execution via a crafted file. Multiple connected sources (Red Hat CVE page, NVD entry, and other catalogs) corroborate this issue. The NVD metric indicates a...
CVE-2022-27262
An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file...
CVE-2022-27262: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted file...