EUVD-2022-3385

Malicious code in bioql PyPI...

CVE-2019-6035

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page...

org.apache.pulsar:pulsar-broker-auth-athenz (>=3.1.0, <=3.1.3), org.apache.pulsar:pulsar-broker-auth-sasl (>=3.1.0, <=3.1.3) +2 more potentially affected by CVE-2024-29834 via org.apache.pulsar:pulsar-broker (>=3.1.0, <=3.1.3)

org.apache.pulsar:pulsar-broker MAVEN version =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.3 Source cves: CVE-2024-29834 Source advisory: GHSA-7MG2-6C6V-342R...

com.datastax.oss:pulsar-jms-filters (>=4.0.0, <=4.0.1), io.github.yangl:pulsar-msg-filter-plugin (3.0) +5 more potentially affected by CVE-2024-29834 via org.apache.pulsar:pulsar-broker (>=3.0.0, <=3.0.3)

org.apache.pulsar:pulsar-broker MAVEN version =3.0.0, =4.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.3 Source cves: CVE-2024-29834 Source advisory: GHSA-7MG2-6C6V-342R...

com.datastax.oss:pulsar-jms-filters (>=4.0.0, <=4.0.1), io.github.yangl:pulsar-msg-filter-plugin (3.0) +5 more potentially affected by CVE-2024-29834 via org.apache.pulsar:pulsar-broker (>=3.0.0, <=3.0.3)

org.apache.pulsar:pulsar-broker MAVEN version =3.0.0, =4.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.3 Source cves: CVE-2024-29834 Source advisory: OSV:GHSA-7MG2-6C6V-342R...

org.apache.pulsar:pulsar-broker-auth-athenz (>=3.2.0, <=3.2.1), org.apache.pulsar:pulsar-broker-auth-sasl (>=3.2.0, <=3.2.1) +2 more potentially affected by CVE-2024-29834 via org.apache.pulsar:pulsar-broker (>=3.2.0, <=3.2.1)

org.apache.pulsar:pulsar-broker MAVEN version =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.1 Source cves: CVE-2024-29834 Source advisory: GHSA-7MG2-6C6V-342R...

org.apache.pulsar:pulsar-broker-auth-athenz (>=3.2.0, <=3.2.1), org.apache.pulsar:pulsar-broker-auth-sasl (>=3.2.0, <=3.2.1) +2 more potentially affected by CVE-2024-29834 via org.apache.pulsar:pulsar-broker (>=3.2.0, <=3.2.1)

org.apache.pulsar:pulsar-broker MAVEN version =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.1 Source cves: CVE-2024-29834 Source advisory: OSV:GHSA-7MG2-6C6V-342R...

org.apache.pulsar:pulsar-broker-auth-athenz (>=3.2.0, <=3.2.1), org.apache.pulsar:pulsar-broker-auth-sasl (>=3.2.0, <=3.2.1) +2 more potentially affected by CVE-2024-29834 via org.apache.pulsar:pulsar-broker (>=3.2.0, <=3.2.1)

org.apache.pulsar:pulsar-broker MAVEN version =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.1 Source cves: CVE-2024-29834 Source advisory: MEND:CVE-2024-29834...

GHSA-9HG5-7HWC-V434 Athenz vulnerable to Open Redirect

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page...

Athenz vulnerable to Open Redirect

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page...

Weak Cryptography Hash

github.com/yahoo/athenz is uses weak cryptographic hashes. The KeyRefresher uses the MD5 hash algorithm, which has been cryptographically broken, and hence cannot be used to guarantee data integrity...

Athenz Input Validation Error Vulnerability

Athenz is an open source authentication and authorization platform. The platform is mainly used for X.509 certificate-based service authentication and access control based on fine-grained roles in dynamic infrastructures. An input validation error vulnerability exists in Athenz v1.8.24 and earlie...

CVE-2019-6035

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page...

CVE-2019-6035

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page...

Open redirect

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page...

CVE-2019-6035

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page...

CVE-2019-6035

CVE-2019-6035: Open redirect vulnerability in Athenz (v1.8.24 and earlier). An attacker can trick users into visiting arbitrary sites via a specially crafted URL, enabling phishing. The JVNDB entry notes the fix in v1.8.25, addressing the issue; other sources consistently describe the same risk a...

CVE-2019-6035

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page...

CVE-2019-6035: URL Redirection to Untrusted Site

Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page...

PT-2019-17959

Name of the Vulnerable Software and Affected Versions Athenz versions 1.8.24 and earlier Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page. This can lead to unauthorized access to sensitive information...