ff4j__ff4j_CVE-2022-44262_1-8-13

✨✨✨ FF4J - Feature Flipping for Java ✨✨✨ Codacy Badge FF4j, is an implementation of the Feature Toggle pattern. 🤘Features Feature Toggle: Enable. and disable features at runtime - no deployments. In your code implement multiple paths protected by dynamic predicates if/then/else. Role-based...

ff4j__ff4j_CVE-2022-44262_1_8_13_fixed

✨✨✨ FF4J - Feature Flipping para Java ✨✨✨ Codacy Badge FF4j é uma implementação do padrão Feature Toggle. 🤘Funcionalidades Feature Toggle: Ative e desative funcionalidades em tempo de execução - sem implantações. No seu código, implemente múltiplos caminhos protegidos por predicados dinâmicos...

CGA-V8QF-FF4J-M6M7

Bulletin has no description...

CVE-2022-44262

ff4j 1.8.1 is vulnerable to Remote Code Execution RCE...

CGA-67G6-Q63M-FF4J

Bulletin has no description...

ff4j is vulnerable to Remote Code Execution (RCE)

ff4j 1.8.1 is vulnerable to Remote Code Execution RCE. This issue has been patched in version 1.9...

CVE-2022-44262

ff4j 1.8.1 is vulnerable to Remote Code Execution RCE...

Remote code execution

ff4j 1.8.1 is vulnerable to Remote Code Execution RCE...

CVE-2022-44262

CVE-2022-44262 affects the FF4J library (ff4j) version 1.8.1, with confirmed Remote Code Execution (RCE) risk. Multiple sources (Red Hat, GHSA, OSV, NVD, CNNVD, PT-2022-27160) document this vulnerability and indicate it has been patched in version 1.9. The root cause details are not expanded in t...

PT-2022-27160 · Ff4J · Ff4J

Name of the Vulnerable Software and Affected Versions: ff4j version 1.8.1 Description: The issue is related to Remote Code Execution RCE. It has been patched in version 1.9. Recommendations: For ff4j version 1.8.1, update to version 1.9 to resolve the issue...

CVE-2022-44262

ff4j 1.8.1 is vulnerable to Remote Code Execution RCE...

CVE-2022-44262

ff4j 1.8.1 is vulnerable to Remote Code Execution RCE...

CVE-2022-44262

ff4j 1.8.1 is vulnerable to Remote Code Execution RCE...

Man-in-the-Middle (MitM)

ff4j-store-ehcache is vulnerable to man-in-the-middle attacks. The package resolves dependencies via an insecure HTTP channel, allowing an attacker to intercept and modify the downloaded dependencies...