Insufficient URL Validation

org.apache.nifi:nifi-dbcp-base is vulnerable to Insufficient URL Validation. The vulnerability allows an authenticated attacker with relevant privileges to bypass connection URL validation using custom input formatting, which leads to unauthorized access to data or other resources...

Debian DLA-3538-1 : zabbix - LTS security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3538 advisory. - Zabbix before 5.0 represents passwords in the users table with unsalted MD5. CVE-2013-7484 - An issue was discovered in...

GHSA-23QF-3JF9-H3Q9 Apache NiFi Insufficient Property Validation vulnerability

Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with connection URL validation that does not provide sufficient protection against crafted inputs. An authenticated and authorized user can bypass connection URL validation using custo...

Apache NiFi 安全漏洞

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation, and system brokering logic. A security vulnerability exists in Apache NiFi versions 1.21.0 through 1.23.0 that originates from allowing an...

PT-2023-4944 · Sap · Sap S/4Hana

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA affected versions not specified Description: The issue is related to insufficient URL validation in the Manage Catalog Items and Cross-Catalog searches Fiori apps, allowing an attacker to redirect users to a malicious site. This m...

CVE-2023-30703

Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information...

CVE-2023-30703

Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information...

CVE-2023-30703

Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information...

CVE-2023-30703

Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information...

CVE-2023-30703

Samsung Members contains an improper URL validation vulnerability (CVE-2023-30703) affecting versions prior to 14.0.07.1. The issue could allow an attacker to access sensitive information. The cited PT-2023-22903 entry confirms the vulnerable range and provides remediation guidance: upgrade to ve...

The vulnerability of the EmailValidator and URLValidator components of the Django web application software platform allows a hacker to trigger a service failure.

The vulnerability of the EmailValidator and URLValidator components of the Django web application framework is related to the use of a regular expression with high computational complexity when processing email subject lines and URL addresses. Exploiting this vulnerability could allow an attacker...

Open Redirect

gitlab is vulnerable to Open Redirect. The vulnerability exists due to the lack of URL validation in the library, which allows an attacker to redirect users to malicious URLs and frame arbitrary content on any page allowing user-controlled markdown...

Path Traversal

shiro-web is vulnerable to Path Traversal. The vulnerability exists because the InvalidRequestFilter.java does not properly validate the URLs, which allows an attacker to access files outside the expected directory, leading to an authentication bypass when used together with APIs or other web...

Open Redirect

gitlab is vulnerable to Open Redirect. The vulnerability exists due to the lack of URL validation in the library, allowing an attacker to send maliciously crafted URLs and redirect users to malicious websites...

Missing Sanitization

gitLab is vulnerable to Missing Sanitization. This vulnerability exits due to the lack of validation of request URLs, allowing an attacker to include sensitive values from logged exception messages within invalid URLs, which are then logged...

CVE-2023-29456

URL validation scheme receives input from a user and then parses it to identify its various components. The validation scheme can ensure that all URL components comply with internet standards...

CVE-2023-29456

URL validation scheme receives input from a user and then parses it to identify its various components. The validation scheme can ensure that all URL components comply with internet standards...

CVE-2023-29456

URL validation scheme receives input from a user and then parses it to identify its various components. The validation scheme can ensure that all URL components comply with internet standards...

CVE-2023-29456

CVE-2023-29456 affects Zabbix’s URL validation scheme that parses user-input URLs to identify components. Multiple connected sources corroborate the issue and describe it as a vulnerability in the URL validation path used by Zabbix (across Debian advisories, OpenVAS, and Astra Linux security bull...

CVE-2023-29456 Inefficient URL schema validation

URL validation scheme receives input from a user and then parses it to identify its various components. The validation scheme can ensure that all URL components comply with internet standards...