com.datastax.oss.quarkus:cassandra-quarkus-client-deployment (>=1.0.1, <=1.0.4), io.automatiko.quarkus:automatiko-operator-deployment (>=0.4.0, <=0.5.0) +6 more potentially affected by CVE-2021-3914 via io.smallrye:smallrye-health-ui (2.2.6)

io.smallrye:smallrye-health-ui MAVEN version 2.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.smallrye:smallrye-health-ui and may be impacted: - com.datastax.oss.quarkus:cassandra-quarkus-client-deployment =1.0.1, =0.4.0, =1.7.3, =1.8.0.cr1,...

SmallRye Health UI Cross-site Scripting vulnerability

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

GHSA-PVC3-WVXR-7CMF SmallRye Health UI Cross-site Scripting vulnerability

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

CVE-2021-3914

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

CVE-2021-3914

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

CVE-2021-3914

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

CVE-2021-3914

The CVE-2021-3914 issue affects SmallRye Health UI: the health-metrics UI component did not adequately sanitize certain inputs, enabling cross-site scripting. Public references (GHSA and Red Hat advisory) confirm a persistent XSS in the SmallRye health UI endpoint and track a fix in later Red Hat...

CVE-2021-3914

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

com.datastax.oss.quarkus:cassandra-quarkus-client (1.0.0), com.datastax.oss.quarkus:cassandra-quarkus-client-deployment (>=1.0.0, <=1.1.1) +45 more potentially affected by CVE-2021-3914 via io.smallrye:smallrye-health-ui (>=2.2.3, <=3.1.1)

io.smallrye:smallrye-health-ui MAVEN version =2.2.3, =1.0.0, =1.0.4, =0.4.0, =1.2.3.final, =1.2.3.final, =1.2.3.final, =1.3.0.beta1, =1.2.3.final, =1.2.3.final, =1.2.3.final, =1.2.1.final, =1.2.2.final and more Source cves: CVE-2021-3914 Source advisory: MEND:CVE-2021-3914...

CVE-2021-3914

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

CVE-2021-3914: Improper Neutralization of Input During Web Page Generation

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

PT-2022-10887 · Smallrye · Smallrye

Name of the Vulnerable Software and Affected Versions: smallrye affected versions not specified Description: The smallrye health metrics UI component did not properly sanitize some user inputs, allowing an attacker to conduct cross-site scripting attacks. Recommendations: At the moment, there is ...

SmallRye cross-site scripting vulnerabilities

SmallRye is an open source implementation of MicroProfile Microservices Architecture Optimization Protocol by the Smallrye team. A cross-site scripting vulnerability exists in the smallrye-health-ui component of SmallRye, which stems from not properly cleaning certain user inputs. An attacker can...

smallrye-health-ui: persistent cross-site scripting in endpoint

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

org.wildfly:wildfly-microprofile-metrics-smallrye (22.0.0.beta1) potentially affected by CVE-2021-3503 via org.wildfly:wildfly-metrics (22.0.0.beta1)

org.wildfly:wildfly-metrics MAVEN version 22.0.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly:wildfly-metrics and may be impacted: - org.wildfly:wildfly-microprofile-metrics-smallrye 22.0.0.beta1 Source cves: CVE-2021-3503 Source...

org.wildfly:wildfly-microprofile-metrics-smallrye (>=23.0.0.beta1, <=23.0.0.final) potentially affected by CVE-2021-3503 via org.wildfly:wildfly-metrics (>=23.0.0.beta1, <=23.0.0.final)

org.wildfly:wildfly-metrics MAVEN version =23.0.0.beta1, =23.0.0.beta1, =23.0.0.final Source cves: CVE-2021-3503 Source advisory: OSV:GHSA-C4R5-XVGW-2942...

org.wildfly:wildfly-microprofile-metrics-smallrye (22.0.1.final) potentially affected by CVE-2021-3503 via org.wildfly:wildfly-metrics (22.0.1.final)

org.wildfly:wildfly-metrics MAVEN version 22.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly:wildfly-metrics and may be impacted: - org.wildfly:wildfly-microprofile-metrics-smallrye 22.0.1.final Source cves: CVE-2021-3503 Source...

org.wildfly:wildfly-microprofile-metrics-smallrye (22.0.0.final) potentially affected by CVE-2021-3503 via org.wildfly:wildfly-metrics (22.0.0.final)

org.wildfly:wildfly-metrics MAVEN version 22.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly:wildfly-metrics and may be impacted: - org.wildfly:wildfly-microprofile-metrics-smallrye 22.0.0.final Source cves: CVE-2021-3503 Source...

org.wildfly:wildfly-microprofile-metrics-smallrye (>=23.0.0.beta1, <=23.0.0.final) potentially affected by CVE-2021-3503 via org.wildfly:wildfly-metrics (>=23.0.0.beta1, <=23.0.0.final)

org.wildfly:wildfly-metrics MAVEN version =23.0.0.beta1, =23.0.0.beta1, =23.0.0.final Source cves: CVE-2021-3503 Source advisory: GHSA-C4R5-XVGW-2942...

org.wildfly:wildfly-microprofile-metrics-smallrye (>=22.0.0.beta1, <=23.0.0.final) potentially affected by CVE-2021-3503 via org.wildfly:wildfly-metrics (>=22.0.0.beta1, <=23.0.0.final)

org.wildfly:wildfly-metrics MAVEN version =22.0.0.beta1, =22.0.0.beta1, =23.0.0.final Source cves: CVE-2021-3503 Source advisory: MEND:CVE-2021-3503...