3404 matches found
CVE-2025-55182
Affected Versions...
ECHO-6E54-DE1B-08C9
Bulletin has no description...
ECHO-73AB-600D-62BE Caught by Cursor Bugbot review on PR #19827: the real vulnerability (GHSA-7xf9-4jfc-wgm4) is specific to Fine-Grained Admin Permissions V2's RealmPermissionsV2 treating manage-clients as equivalent to managing the special "admin-permissions" client, which then grants realm-wide admin power. RealmPermissionsV2 and the admin-permissions client concept do not exist in 25.0.6 — its older RealmPermissions.canManageAuthorizationDefault() has no per-ResourceServer parameter at all (it's a single, undifferentiated realm-wide check), so there is no "is this the special admin-permissions client" distinction for a narrow, upstream-faithful fix to attach to. An earlier patch here unconditionally removed MANAGE_CLIENTS from that check to close the described escalation, but that changes intended authorization behavior for every regular client's authorization management, not just a vulnerable path (upstream's real fix leaves the MANAGE_CLIENTS grant intact for non-admin-permissions clients) — reverted.
Bulletin has no description...
CVE-2022-38181
Questo repository non contiene un README...
MINI-JJVQ-7M2J-2W26
Bulletin has no description...
MINI-F4VR-F483-HR9J
Bulletin has no description...
MINI-33PJ-H8VC-QJ7P
Bulletin has no description...
MINI-8CJX-JJV5-3H4H
Bulletin has no description...
CVE-2022-42889
Questo repository non contiene un README...
ECHO-9169-1FD9-0C1C
Bulletin has no description...
CGA-87J8-VM8F-62RM
Bulletin has no description...
CVE-2025-8571
CVE-2025-8571 CVE-2025-8571...
CVE-2022-26xx9
CVE-2022-26xx9 CVE-2022-26xx9...
ECHO-A444-0F4D-8828
Bulletin has no description...
ECHO-0DD1-CA9D-47D8
Bulletin has no description...
ECHO-EDF5-B30F-F723
Bulletin has no description...
ECHO-661F-E710-DB74
Bulletin has no description...
ECHO-118C-18CE-2FAB
Bulletin has no description...