Eval Injection

Overview Affected versions of this package are vulnerable to Eval Injection via the processEmbeddedExpressions process. An attacker can execute arbitrary operating-system commands by sending specially crafted HTTP request data containing embedded expressions that are recursively evaluated...

io.karatelabs:karate-gatling (>=2.0.3, <=2.0.10), io.karatelabs:karate-image (2.0.10) +1 more potentially affected by unknown CVE via io.karatelabs:karate-core (>=2.0.3, <=2.0.10)

io.karatelabs:karate-core MAVEN version =2.0.3, =2.0.3, =2.0.3, =2.0.10 Source cves: unknown CVE Source advisory: SNYK:JAVA-IOKARATELABS-17732778...

GHSA-2C85-RFCC-G74J Karate Mock Server RCE via embedded expression evaluation of request-derived data

Summary Karate Mock Server can execute embedded expressions found in attacker-controlled HTTP request data when a Mock Server feature assigns request-derived values such as request, requestHeaders, or requestParams to variables. In affected scenarios, an unauthenticated remote attacker can place ...

Karate Mock Server RCE via embedded expression evaluation of request-derived data

Summary Karate Mock Server can execute embedded expressions found in attacker-controlled HTTP request data when a Mock Server feature assigns request-derived values such as request, requestHeaders, or requestParams to variables. In affected scenarios, an unauthenticated remote attacker can place ...

PT-2026-53118

Summary Karate Mock Server can execute embedded expressions found in attacker-controlled HTTP request data when a Mock Server feature assigns request-derived values such as request, requestHeaders, or requestParams to variables. In affected scenarios, an unauthenticated remote attacker can place ...

MAL-2024-2222 Malicious code in down_load_ebook_universo_karate_kid_by_bruno_bertolini_bastos_co2iw (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in down_load_ebook_universo_karate_kid_by_bruno_bertolini_bastos_co2iw (npm)

--- -= Per source details. Do not edit below this line.=-...

karate-budokan-thun.com Improper Access Control vulnerability OBB-3802326

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-lappersdorf.de Improper Access Control vulnerability OBB-3771165

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-tkv.de Improper Access Control vulnerability OBB-3765162

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-psv-hattingen.de Cross Site Scripting vulnerability OBB-3722790

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-voisins.fr Cross Site Scripting vulnerability OBB-3661484

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-voisins.fr Cross Site Scripting vulnerability OBB-3632216

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-tourny27.fr Cross Site Scripting vulnerability OBB-3435462

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-do-overath.de Cross Site Scripting vulnerability OBB-3245126

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

com.intuit.karate:karate-gatling (1.3.1), com.intuit.karate:karate-junit4 (1.3.1) +4 more potentially affected by CVE-2023-1370 via com.intuit.karate:karate-core (1.3.1)

com.intuit.karate:karate-core MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.intuit.karate:karate-core and may be impacted: - com.intuit.karate:karate-gatling 1.3.1 - com.intuit.karate:karate-junit4 1.3.1 -...

GHSA-5X5Q-8CGM-2HJQ Karate has vulnerable dependency on json-smart package (CVE-2023-1370)

Summary The CVE How to fix it Very simple, just upgrade json-path package to 2.8.0 from 2.7.0 inside karate-core pom.xml ;...

Karate has vulnerable dependency on json-smart package (CVE-2023-1370)

Summary The CVE How to fix it Very simple, just upgrade json-path package to 2.8.0 from 2.7.0 inside karate-core pom.xml ;...

karate-de-luca.fr Cross Site Scripting vulnerability OBB-2447874

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

karate-cochem.de Improper Access Control vulnerability OBB-2411465

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...