CVE-2024-2689 Denial of Service if invalid UTF-8 sent

Denial of Service in Temporal Server prior to version 1.20.5, 1.21.6, and 1.22.7 allows an authenticated user who has permissions to interact with workflows and has crafted an invalid UTF-8 string for submission to potentially cause a crashloop. If left unchecked, the task containing the invalid...

CVE-2024-2689

Summary: CVE-2024-2689 is a Temporal Server DoS affecting versions 1.20.5, 1.21.6 and 1.22.7 where an authenticated user with workflow permissions can submit an invalid UTF-8 string to trigger a crashloop, causing queue lag and eventual resource exhaustion. The logs may reveal the failing workflo...

Temporal Server 安全漏洞

Temporal Server is a microservices orchestration platform from Temporal. A security vulnerability exists in Temporal Server versions prior to 1.20.5, 1.21.6, and 1.22.7, which stems from a vulnerability that allows an attacker to interact with a workflow and craft invalid UTF-8 strings for...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: src, amass, trillian, kine, argo-workflows, kots, ferretdb, caddy, k3s, step, spicedb, kube-bench, step-ca, temporal-server...

CVE-2024-27304 vulnerabilities

Vulnerabilities for packages: temporal-server-fips, kots, argo-workflows, ferretdb, kube-bench-fips, caddy-fips, trillian, wavefront-collector-for-kubernetes, trillian-fips, keda-fips, step-ca, argo-workflows-fips, kube-bench, spicedb, temporal-server, amass, caddy, step, k3s, falcosidekick-fips,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubeflow, kaf, kubernetes, slsa-verifier, kaniko, cluster-proportional-autoscaler, helm-operator-fips, kubeflow-fips, grpc-health-probe, nfs-subdir-external-provisioner, crossplane-provider-aws-kinesis, ctop, cosign-fips, prometheus-postgres-exporter, eksctl, trillia...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: src, amass, trillian, kine, argo-workflows, kots, ferretdb, caddy, k3s, step, spicedb, kube-bench, step-ca, temporal-server...

GHSA-7JWH-3VRQ-Q3M8 vulnerabilities

Vulnerabilities for packages: temporal-server-fips, kots, argo-workflows, ferretdb, kube-bench-fips, caddy-fips, trillian, wavefront-collector-for-kubernetes, trillian-fips, keda-fips, step-ca, argo-workflows-fips, kube-bench, spicedb, temporal-server, amass, caddy, step, k3s, falcosidekick-fips,...

GHSA-MRWW-27VC-GGHV vulnerabilities

Vulnerabilities for packages: temporal-server-fips, kots, argo-workflows, ferretdb, kube-bench-fips, caddy-fips, trillian, wavefront-collector-for-kubernetes, trillian-fips, keda-fips, step-ca, argo-workflows-fips, kube-bench, spicedb, temporal-server, amass, caddy, step, k3s, falcosidekick-fips,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: docker-compose, kine, temporal-server, kubescape, buildkitd, k3s, kubernetes-csi-external-resizer, kubevela, temporal, volume-modifier-for-k8s, envoy-ratelimit, cri-tools, kubernetes, metrics-server...

GHSA-GM2G-2XR9-PXXJ Temporal Server vulnerable to Incorrect Authorization and Insecure Default Initialization of Resource

Insecure defaults in open-source Temporal Server before version 1.20 on all platforms allows an attacker to craft a task token with access to a namespace other than the one specified in the request. Creation of this task token must be done outside of the normal Temporal server flow. It requires t...

Temporal Server vulnerable to Incorrect Authorization and Insecure Default Initialization of Resource

Insecure defaults in open-source Temporal Server before version 1.20 on all platforms allows an attacker to craft a task token with access to a namespace other than the one specified in the request. Creation of this task token must be done outside of the normal Temporal server flow. It requires t...

CVE-2023-3485

Insecure defaults in open-source Temporal Server before version 1.20 on all platforms allows an attacker to craft a task token with access to a namespace other than the one specified in the request. Creation of this task token must be done outside of the normal Temporal server flow. It requires t...

Race condition

Insecure defaults in open-source Temporal Server before version 1.20 on all platforms allows an attacker to craft a task token with access to a namespace other than the one specified in the request. Creation of this task token must be done outside of the normal Temporal server flow. It requires t...

CVE-2023-3485 Insecure Default Authorization in Temporal Server

Insecure defaults in open-source Temporal Server before version 1.20 on all platforms allows an attacker to craft a task token with access to a namespace other than the one specified in the request. Creation of this task token must be done outside of the normal Temporal server flow. It requires t...

CVE-2023-3485

CVE-2023-3485 (Temporal Server) : The Temporal Server (before v1.20) has insecure defaults that allow an attacker to craft a task token giving access to a namespace other than the one in the request. The token must be created outside the normal Temporal server flow and requires the target namespa...

CVE-2023-3485 Insecure Default Authorization in Temporal Server

Insecure defaults in open-source Temporal Server before version 1.20 on all platforms allows an attacker to craft a task token with access to a namespace other than the one specified in the request. Creation of this task token must be done outside of the normal Temporal server flow. It requires t...

Temporal Server 安全漏洞

Temporal Server is a microservices orchestration platform from Temporal. A security vulnerability exists in Temporal Server that stems from insecure default settings...

PT-2023-25032

Name of the Vulnerable Software and Affected Versions: Temporal Server versions prior to 1.20 Description: Insecure defaults in the open-source Temporal Server allow an attacker to craft a task token with access to a namespace other than the one specified in the request. This can be done outside ...

Insecure Default Initialization of Resource

Insecure defaults in open-source Temporal Server before version 1.20 on all platforms allows an attacker to craft a task token with access to a namespace other than the one specified in the request. Creation of this task token must be done outside of the normal Temporal server flow. It requires t...