OWASP DefectDojo 安全漏洞

OWASP DefectDojo is a powerful vulnerability management platform and DevSecOps platform developed by the OWASP Foundation in the United States. OWASP DefectDojo versions 2.55.4 and earlier contained a security vulnerability. This vulnerability stemmed from an error in the inputzip.read function...

CVE-2026-3816: Improper Resource Shutdown or Release

A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function inputzip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attack can be initiated remotely. The exploi...

PT-2026-24055

A security vulnerability has been detected in OWASP DefectDojo up to 2.55.4. This vulnerability affects the function input zip.read of the file parser.py of the component SonarQubeParser/MSDefenderParser. The manipulation leads to denial of service. The attack can be initiated remotely. The explo...

Malicious code in defectdojo (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5390 Malicious code in defectdojo (npm)

The package communicates with a domain associated with malicious activity...

io.jenkins.plugins:artifactory-artifact-manager (>=118.v4eb_b_1533255c, <=122.v0b_d7cb_89ca_34), io.jenkins.plugins:blackduck-security-scan (>=2.0.0, <=2.6.0-1436.vd14307a_d07ec) +6 more potentially affected by CVE-2024-47805 via org.jenkins-ci.plugins:credentials (1344.v5a_3f65a_1e173)

org.jenkins-ci.plugins:credentials MAVEN version 1344.v5a3f65a1e173 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:credentials and may be impacted: - io.jenkins.plugins:artifactory-artifact-manager =118.v4ebb1533255c, =2.0.0,...

CVE-2023-48171

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component...

CVE-2023-48171

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component...

OWASP DefectDojo 安全漏洞

OWASP DefectDojo is a powerful vulnerability management platform and DevSecOps platform from the US-based OWASP Foundation. A security vulnerability exists in OWASP DefectDojo versions prior to v.1.5.3.1, which stems from a remote attacker being able to elevate privileges via the user rights...

CVE-2023-48171

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component...

CVE-2023-48171

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component...

CVE-2023-48171

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component...

PT-2024-13552 · Owasp · Owasp Defectdojo

Name of the Vulnerable Software and Affected Versions: OWASP DefectDojo versions prior to 1.5.3.1 Description: An issue in the user permissions component allows a remote attacker to escalate privileges. Recommendations: For versions prior to 1.5.3.1, update to version 1.5.3.1 or later to resolve...

CVE-2023-48171: Improper Privilege Management

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component...

CVE-2023-48171

An issue in OWASP DefectDojo before v.1.5.3.1 allows a remote attacker to escalate privileges via the user permissions component...

CVE-2023-48171

CVE-2023-48171 affects OWASP DefectDojo before v1.5.3.1. The issue, described consistently across NVD/OSV/CVE feeds, is a privilege-escalation in the user permissions component that could allow a remote attacker to gain HIGH impact. The only remediation documented is to upgrade to DefectDojo v1.5...

io.jenkins.plugins:artifactory-artifact-manager (>=101.v0f82809a_8706, <=108.veb_6efeb_c992b), io.jenkins.plugins:defectdojo (1.049.v8272429d864a) +3 more potentially affected by CVE-2024-39459 via org.jenkins-ci.plugins:plain-credentials (182.v468b_97b_9dcb_8)

org.jenkins-ci.plugins:plain-credentials MAVEN version 182.v468b97b9dcb8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:plain-credentials and may be impacted: - io.jenkins.plugins:artifactory-artifact-manager =101.v0f82809a8706,...

Malicious code in @defectdojo/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7829990b125f94bdbe28de3849b4e7d744d86a16de66a4dcb9495cb48c72dbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DefectDojo - Application Vulnerability Correlation And Security Orchestration Application

DefectDojo is a security program and vulnerability management tool. DefectDojo allows you to manage your application security program, maintain product and application information, schedule scans, triage vulnerabilities and push findings into defect trackers. Consolidate your findings into one...