io.hawt:hawtio-aether (1.5.2), io.hawt:hawtio-base (1.5.2) +17 more potentially affected by CVE-2019-9827 via io.hawt:hawtio-core (1.5.2)

io.hawt:hawtio-core MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.hawt:hawtio-core and may be impacted: - io.hawt:hawtio-aether 1.5.2 - io.hawt:hawtio-base 1.5.2 - io.hawt:hawtio-dozer 1.5.2 - io.hawt:hawtio-git 1.5.2 -...

io.hawt:hawtio-aether (1.5.3), io.hawt:hawtio-base (1.5.3) +17 more potentially affected by CVE-2019-9827 via io.hawt:hawtio-core (1.5.3)

io.hawt:hawtio-core MAVEN version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.hawt:hawtio-core and may be impacted: - io.hawt:hawtio-aether 1.5.3 - io.hawt:hawtio-base 1.5.3 - io.hawt:hawtio-dozer 1.5.3 - io.hawt:hawtio-git 1.5.3 -...

io.hawt:hawtio-aether (1.4.19), io.hawt:hawtio-base (1.4.19) +15 more potentially affected by CVE-2019-9827 via io.hawt:hawtio-core (1.4.19)

io.hawt:hawtio-core MAVEN version 1.4.19 is affected by a known vulnerability. The following packages have a transitive dependency on io.hawt:hawtio-core and may be impacted: - io.hawt:hawtio-aether 1.4.19 - io.hawt:hawtio-base 1.4.19 - io.hawt:hawtio-dozer 1.4.19 - io.hawt:hawtio-git 1.4.19 -...

io.hawt:hawtio-aether (1.4.68), io.hawt:hawtio-base (1.4.68) +17 more potentially affected by CVE-2019-9827 via io.hawt:hawtio-core (1.4.68)

io.hawt:hawtio-core MAVEN version 1.4.68 is affected by a known vulnerability. The following packages have a transitive dependency on io.hawt:hawtio-core and may be impacted: - io.hawt:hawtio-aether 1.4.68 - io.hawt:hawtio-base 1.4.68 - io.hawt:hawtio-dozer 1.4.68 - io.hawt:hawtio-git 1.4.68 -...

io.apiman:apiman-distro-wildfly8 (>=1.0.0.beta2, <=1.0.0.final), io.apiman:apiman-manager-ui-war-wildfly8 (>=1.0.0.beta2, <=1.0.2.final) +71 more potentially affected by CVE-2018-10912 via org.keycloak:keycloak-core (1.1.0.beta2)

org.keycloak:keycloak-core MAVEN version 1.1.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - io.apiman:apiman-distro-wildfly8 =1.0.0.beta2, =1.0.0.beta2, =1.0.0.beta2, =2.0.16, =2.0.20, =2.2.28 ...

springboot_authority cross-site scripting vulnerability

springbootauthority is a backend management system. The system includes modules for user management, role management, and resource connection management. A cross-site scripting vulnerability exists in the admin/role/edit page in springbootauthority 2017-03-06 and earlier versions, which can be...

Cross site scripting

An issue was discovered in springbootauthority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey, name, or description parameter...

CVE-2018-17369

An issue was discovered in springbootauthority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey, name, or description parameter...

PT-2018-13997

Name of the Vulnerable Software and Affected Versions springboot authority versions prior to 2017-03-06 Description An issue was discovered that allows stored XSS via the admin/role/edit endpoint, specifically through the roleKey, name, or description parameters. Recommendations For versions prio...