CVE-2025-27023

CVE-2025-27023 affects Infinera G42, specifically version R6.1.3. The issue is improper input validation in the WebGUI CLI web interface, enabling remote authenticated users to read all OS files by crafting CLI commands (and by triggering execution of a script-file present on the device). The roo...

CVE-2025-27023: Improper Input Validation

Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authenticated users to read all OS files via crafted CLI commands. Details: The web interface based management of the Infinera G42 appliance enables the feature of executing a restricted set of...

PT-2025-27618 · Infinera · Infinera G42

Name of the Vulnerable Software and Affected Versions: Infinera G42 version R6.1.3 Description: The issue is related to insufficient input validation in the WebGUI CLI web interface of the Infinera G42 appliance. This allows remote authenticated users to read all OS files via crafted CLI commands...

@kakashi-ventures-accelerator/catalyst-cli (0.1.0), @mew-protocol/mew (>=0.5.0, <=0.11.0) +1 more potentially affected by CVE-2025-53110 via @modelcontextprotocol/server-filesystem (0.6.2)

@modelcontextprotocol/server-filesystem NPM version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on @modelcontextprotocol/server-filesystem and may be impacted: - @kakashi-ventures-accelerator/catalyst-cli 0.1.0 - @mew-protocol/mew =0.5.0, =0.11....

Insertion Of Sensitive Information Into Log File

snyk is vulnerable to Insertion of Sensitive Information into Log File. The vulnerability is due to improper logging of sensitive data because of debug and trace log modes capturing container registry credentials, authentication tokens, and access tokens when certain CLI commands are executed...

@devsoutinho/alfred-currency-converter (>=2.0.0, <=2.1.1), @felixcatto/ui (>=0.0.14, <=0.0.32) +13 more potentially affected by CVE-2025-45143 via string-math (1.2.2)

string-math NPM version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on string-math and may be impacted: - @devsoutinho/alfred-currency-converter =2.0.0, =0.0.14, =0.4.0-beta.2, =1.5.12, =0.1.47, =0.0.32, =2.0.0, =4.0.0, =1.0.0, =1.2.0, =1.0.8,...

Sensitive Data Exposure

Infinispan CLI is vulnerable to sensitive data exposure. The vulnerability is due to processing a Base64-decoded Kubernetes secret password in plaintext and including it in a command string, which may expose the data in error messages when a command is not found, allowing attackers to exploit thi...

CVE-2025-6624

Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when executing Snyk CLI in DEBUG or...

org.infinispan:infinispan-quarkus-cli (15.1.0.dev05), org.infinispan:infinispan-server-integration (15.1.0.dev05) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.1.0.dev05)

org.infinispan:infinispan-cli-client MAVEN version 15.1.0.dev05 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-quarkus-cli 15.1.0.dev05 -...

org.infinispan:infinispan-server-runtime (11.0.7.final), org.infinispan:infinispan-server-testdriver-core (11.0.7.final) +2 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (11.0.7.final)

org.infinispan:infinispan-cli-client MAVEN version 11.0.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-runtime 11.0.7.final -...

org.infinispan:infinispan-server-integration (14.0.15.final), org.infinispan:infinispan-server-integrationtests-commons (14.0.15.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (14.0.15.final)

org.infinispan:infinispan-cli-client MAVEN version 14.0.15.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 14.0.15.final -...

org.infinispan:infinispan-quarkus-cli (15.0.3.final), org.infinispan:infinispan-server-runtime (15.0.3.final) +3 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.0.3.final)

org.infinispan:infinispan-cli-client MAVEN version 15.0.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-quarkus-cli 15.0.3.final -...

org.infinispan:infinispan-quarkus-cli (15.0.4.final), org.infinispan:infinispan-server-integration (15.0.4.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.0.4.final)

org.infinispan:infinispan-cli-client MAVEN version 15.0.4.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-quarkus-cli 15.0.4.final -...

org.infinispan:infinispan-quarkus-cli (15.0.8.final), org.infinispan:infinispan-server-integration (15.0.8.final) +8 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (15.0.8.final)

org.infinispan:infinispan-cli-client MAVEN version 15.0.8.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-quarkus-cli 15.0.8.final -...

io.quarkus:quarkus-infinispan-client-deployment (3.3.0), io.quarkus:quarkus-test-infinispan-client (3.3.0) +8 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (14.0.13.final)

org.infinispan:infinispan-cli-client MAVEN version 14.0.13.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - io.quarkus:quarkus-infinispan-client-deployment 3.3.0 -...

io.quarkus:quarkus-infinispan-client-deployment (>=3.5.2, <=3.6.0.cr1), io.quarkus:quarkus-test-infinispan-client (>=3.5.2, <=3.6.0.cr1) +8 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (14.0.20.final)

org.infinispan:infinispan-cli-client MAVEN version 14.0.20.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - io.quarkus:quarkus-infinispan-client-deployment =3.5.2, =3.5.2, =3.6.0.cr1 -...

org.infinispan:infinispan-server-integration (14.0.23.final), org.infinispan:infinispan-server-integrationtests-commons (14.0.23.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (14.0.23.final)

org.infinispan:infinispan-cli-client MAVEN version 14.0.23.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 14.0.23.final -...

org.infinispan:infinispan-server-integration (14.0.25.final), org.infinispan:infinispan-server-integrationtests-commons (14.0.25.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (14.0.25.final)

org.infinispan:infinispan-cli-client MAVEN version 14.0.25.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 14.0.25.final -...

org.infinispan:infinispan-server-integration (12.1.15.final), org.infinispan:infinispan-server-integrationtests-commons (12.1.15.final) +5 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (12.1.15.final)

org.infinispan:infinispan-cli-client MAVEN version 12.1.15.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - org.infinispan:infinispan-server-integration 12.1.15.final -...

io.quarkus:quarkus-test-infinispan-client (>=2.5.0.cr1, <=2.6.0.final), org.infinispan:infinispan-server-integration (13.0.0.final) +6 more potentially affected by CVE-2025-5731 via org.infinispan:infinispan-cli-client (13.0.0.final)

org.infinispan:infinispan-cli-client MAVEN version 13.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cli-client and may be impacted: - io.quarkus:quarkus-test-infinispan-client =2.5.0.cr1, =2.6.0.final -...