46 matches found
Remote code execution
A Remote Code Execution RCE vulnerability was discovered in the Any23 YAMLExtractor.java file and is known to affect Any23 versions 2.5. RCE vulnerabilities allow a malicious actor to execute any code of their choice on a remote machine over LAN, WAN, or internet. RCE belongs to the broader class...
Xxe
An XML external entity XXE injection vulnerability was discovered in the Any23 StreamUtils.java file and is known to affect Any23 versions 2.5. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's processing of...
CVE-2021-40146 A Remote Code Execution (RCE) vulnerability exists in Apache Any23 YAMLExtractor.java
A Remote Code Execution RCE vulnerability was discovered in the Any23 YAMLExtractor.java file and is known to affect Any23 versions 2.5. RCE vulnerabilities allow a malicious actor to execute any code of their choice on a remote machine over LAN, WAN, or internet. RCE belongs to the broader class...
CVE-2021-40146
CVE-2021-40146 concerns a Remote Code Execution (RCE) in the Apache Any23 project, specifically in the YAMLExtractor.java file. The vulnerability is described as affecting Any23 versions earlier than 2.5, enabling an attacker to execute arbitrary code on a remote system over network connections. ...
CVE-2021-38555
Apache Any23 is affected by CVE-2021-38555 due to an XML External Entity (XXE) vulnerability in StreamUtils.java, affecting versions before 2.5. The issue allows an attacker to manipulate XML processing and potentially view server files or reach back‑end systems accessible to the application. Rem...
CVE-2021-38555 An XML external entity (XXE) injection vulnerability exists in Apache Any23 StreamUtils.java
An XML external entity XXE injection vulnerability was discovered in the Any23 StreamUtils.java file and is known to affect Any23 versions 2.5. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's processing of...