com.meltwater:rxrabbit (1.3.0), com.rabbitmq.jms:rabbitmq-jms (>=1.8.0, <=1.8.1) +6 more potentially affected by CVE-2023-46120 via com.rabbitmq:amqp-client (4.3.0)

com.rabbitmq:amqp-client MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.meltwater:rxrabbit 1.3.0 - com.rabbitmq.jms:rabbitmq-jms =1.8.0, =2.2.2, =2.2.2, =2.2.0, =2.2.0, =1.0.14,...

io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.7.0, <=2.7.1), io.zipkin.java:zipkin-collector-rabbitmq (>=2.7.0, <=2.7.1) potentially affected by CVE-2023-46120 via com.rabbitmq:amqp-client (4.5.0)

com.rabbitmq:amqp-client MAVEN version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.7.0, =2.7.0, =2.7.1 Source cves: CVE-2023-46120 Sourc...

spring-boot: Security Bypass With Wildcard Pattern Matching on Cloud Foundry

A flaw was found in Spring Boot. This targets specifically 'spring-boot-actuator-autoconfigure' package. This issue occurs when an application is deployed to Cloud Foundry, which could be susceptible to a security bypass. Specifically, an application is vulnerable when all of the following are...

Denial Of Service (DoS)

spring-boot-autoconfigure is vulnerable to Denial Of Service DoS. The vulnerability is applicable when the application has Spring MVC auto-configuration enabled and uses the Spring Boot welcome page, which can be either static or templated, and the application is deployed behind a proxy which...

Access Restriction Bypass

org.springframework.boot:spring-boot-actuator-autoconfigure is vulnerable to Access Restriction Bypass. The vulnerability is due to improper wild card matching, which allows a remote attacker to bypass access restrictions and gain access to the system. Please note that the vulnerability is only...

cn.com.pism.gfd:gofastdfs-spring-boot-autoconfigure (>=0.0.1, <=0.0.5), cn.com.pism.gfd:gofastdfs-spring-boot-starter (>=0.0.1, <=0.0.5) +244 more potentially affected by CVE-2022-45690 via cn.hutool:hutool-json (>=5.0.0, <=5.8.10)

cn.hutool:hutool-json MAVEN version =5.0.0, =0.0.1, =0.0.1, =1.31.0.rc, =1.31.0, =2.0.0, =5.0.0, =5.0.0, =5.0.0, =5.7.0, =2.0.2, =2.0.2, =2.0.2, =2.0.2, =2.0.2, =2.0.6 and more Source cves: CVE-2022-45690 Source advisory: GHSA-WHGH-G24C-3J5Q...

com.github.hengboy:micro-job-autoconfigure (0.0.3.release), com.github.hengboy:micro-job-registry-nacos (0.0.3.release) +9 more potentially affected by CVE-2021-43116 via com.alibaba.nacos:nacos-client (0.8.2)

com.alibaba.nacos:nacos-client MAVEN version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.alibaba.nacos:nacos-client and may be impacted: - com.github.hengboy:micro-job-autoconfigure 0.0.3.release -...

com.microsoft.azure:azure-eventhubs-eph (0.10.0), io.zipkin.azure:zipkin-autoconfigure-collector-eventhub (>=0.1.0, <=0.1.3) +1 more potentially affected by CVE-2020-16971 via com.microsoft.azure:azure-eventhubs (0.10.0)

com.microsoft.azure:azure-eventhubs MAVEN version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.azure:azure-eventhubs and may be impacted: - com.microsoft.azure:azure-eventhubs-eph 0.10.0 -...

Windows Gather Proxy Setting

This module pulls a user's proxy settings. If neither RHOST or SID are set it pulls the current user, else it will pull the user's settings for the specified SID and target host. This module requires Metasploit: https://metasploit.com/download Current source:...