2 matches found
CVE-2026-34359 HAPI FHIR: Authentication Credential Leakage via Improper URL Prefix Matching on HTTP Redirect in HAPI FHIR Core
HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.4, ManagedWebAccessUtils.getServer uses String.startsWith to match request URLs against configured server URLs for authentication credential dispatch. Because configured...
7.4CVSS5.8AI score0.00158EPSS
SaveExploits1References1
[SECURITY] Fedora 44 Update: wordpress-6.9.4-1.fc44
Wordpress is an online publishing / weblog package that makes it very easy, almost trivial, to get information out to people on the web. Important information in /usr/share/doc/wordpress/README.fedora...
4.3CVSS5.9AI score0.00305EPSS
SaveExploits0
20