1211 matches found
CVE-2024-55875
http4k is a functional toolkit for Kotlin HTTP applications. Prior to version 6.50.0.0, there is a potential XXE XML External Entity Injection vulnerability when http4k handling malicious XML contents within requests, which might allow attackers to read local sensitive information on server,...
org.http4k:http4k (>=4.3.3.0, <=4.3.4.1) potentially affected by CVE-2024-55875 via org.http4k:http4k-format-xml (>=4.3.3.0, <=4.3.4.1)
org.http4k:http4k-format-xml MAVEN version =4.3.3.0, =4.3.3.0, =4.3.4.1 Source cves: CVE-2024-55875 Source advisory: MEND:CVE-2024-55875...
CVE-2024-55875 http4k has a potential XXE (XML External Entity Injection) vulnerability
http4k is a functional toolkit for Kotlin HTTP applications. Prior to version 6.50.0.0, there is a potential XXE XML External Entity Injection vulnerability when http4k handling malicious XML contents within requests, which might allow attackers to read local sensitive information on server,...
CVE-2024-55875 http4k has a potential XXE (XML External Entity Injection) vulnerability
http4k is a functional toolkit for Kotlin HTTP applications. Prior to version 6.50.0.0, there is a potential XXE XML External Entity Injection vulnerability when http4k handling malicious XML contents within requests, which might allow attackers to read local sensitive information on server,...
http4k Code Issues and Vulnerabilities
http4k is a lightweight but full-featured HTTP toolkit from the http4k open source. A code issue vulnerability exists in versions of http4k prior to 5.41.0.0, which stems from a potential XML External Entity Injection vulnerability in the handling of malicious XML content in a request, which coul...
CVE-2024-55875: Exposure of Sensitive Information to an Unauthorized Actor
http4k is a functional toolkit for Kotlin HTTP applications. Prior to version 6.50.0.0, there is a potential XXE XML External Entity Injection vulnerability when http4k handling malicious XML contents within requests, which might allow attackers to read local sensitive information on server,...
PT-2024-10160 · Http4K · Http4K
Name of the Vulnerable Software and Affected Versions: http4k versions prior to 5.41.0.0 Description: The issue is related to an XXE XML External Entity Injection vulnerability when http4k handles malicious XML contents within requests. This could allow attackers to read local sensitive informati...
io.github.lsd-consulting:lsd-core (>=5.1.0, <=5.4.0), io.github.lsd-consulting:lsd-cucumber (>=4.1.0, <=4.1.1) +9 more potentially affected by CVE-2023-3432 via net.sourceforge.plantuml:plantuml-mit (>=1.2023.7, <=1.2023.8)
net.sourceforge.plantuml:plantuml-mit MAVEN version =1.2023.7, =5.1.0, =4.1.0, =4.1.0, =4.1.0, =3.1.0, =4.1.0, =0.0.2, =5.1.0, =1.3.12, =1.3.12, =1.3.12, =1.3.20 Source cves: CVE-2023-3432 Source advisory: OSV:GHSA-FF3M-68VJ-H86P...
io.github.lsd-consulting:lsd-core (>=5.1.0, <=5.4.0), io.github.lsd-consulting:lsd-cucumber (>=4.1.0, <=4.1.1) +9 more potentially affected by CVE-2023-3432 via net.sourceforge.plantuml:plantuml-mit (>=1.2023.7, <=1.2023.8)
net.sourceforge.plantuml:plantuml-mit MAVEN version =1.2023.7, =5.1.0, =4.1.0, =4.1.0, =4.1.0, =3.1.0, =4.1.0, =0.0.2, =5.1.0, =1.3.12, =1.3.12, =1.3.12, =1.3.20 Source cves: CVE-2023-3432 Source advisory: GHSA-FF3M-68VJ-H86P...
org.http4k:http4k-connect-storage-http (>=3.5.1.0, <=3.6.0.0) potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.51.0)
org.webjars:swagger-ui MAVEN version 3.51.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - org.http4k:http4k-connect-storage-http =3.5.1.0, =3.6.0.0 Source cves: CVE-2018-25031 Source advisory:...
io.quarkus:quarkus-smallrye-openapi-deployment (>=1.9.0.final, <=1.9.2.final), io.quarkus:quarkus-swagger-ui-deployment (>=1.9.0.final, <=1.9.2.final) +1 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.35.1)
org.webjars:swagger-ui MAVEN version 3.35.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - io.quarkus:quarkus-smallrye-openapi-deployment =1.9.0.final, =1.9.0.final, =2.15.0.0, =3.2.0.1 Source cves:...