23 matches found
EUVD-2023-29966
Malicious code in bioql PyPI...
EUVD-2023-29965
Malicious code in bioql PyPI...
CVE-2023-26093
Liima before 1.17.28 allows Hibernate query language HQL injection, related to colToSort in the deployment filter...
CVE-2023-26092
Liima before 1.17.28 allows server-side template injection...
CVE-2023-26093
Liima before 1.17.28 allows Hibernate query language HQL injection, related to colToSort in the deployment filter...
CVE-2023-26092
Liima before 1.17.28 allows server-side template injection...
Sql injection
Liima before 1.17.28 allows Hibernate query language HQL injection, related to colToSort in the deployment filter...
CVE-2023-26093
Liima before 1.17.28 allows Hibernate query language HQL injection, related to colToSort in the deployment filter...
CVE-2023-26093
Liima before 1.17.28 allows Hibernate query language HQL injection, related to colToSort in the deployment filter...
CVE-2023-26092
Liima before 1.17.28 allows server-side template injection...
CVE-2023-26092
Liima before 1.17.28 allows server-side template injection...
CVE-2023-26093: Improper Neutralization of Special Elements used in an SQL Command
Liima before 1.17.28 allows Hibernate query language HQL injection, related to colToSort in the deployment filter...
CVE-2023-26092
Liima before 1.17.28 allows server-side template injection...
CVE-2023-26093
Liima before 1.17.28 allows Hibernate query language HQL injection, related to colToSort in the deployment filter...
CVE-2023-26093
CVE-2023-26093 affects Liima prior to version 1.17.28. The root cause is a Hibernate Query Language (HQL) injection in the deployment filter’s colToSort logic, potentially enabling authenticated or network-based attackers to achieve high-impact outcomes. The provided documents confirm the vulnera...
Liima SQL injection vulnerability
Liima is a Liima open source application. Allows you to manage the configuration of Java EE applications in a variety of versions of an unlimited number of different environments , including the automatic deployment of these applications . Liima 1.17.28 before the version of a security...
CVE-2023-26092
Liima before 1.17.28 allows server-side template injection...
CVE-2023-26092
Liima up to version 1.17.27 is vulnerable to server-side template injection. The issue arises in Liima’s templating flow and can lead to arbitrary code execution or access to sensitive data as indicated by the CVE details (high impact). Remediation: upgrade to Liima 1.17.28 or later (the fixed ve...
PT-2023-20481
Name of the Vulnerable Software and Affected Versions Liima versions prior to 1.17.28 Description The issue allows server-side template injection. Recommendations For versions prior to 1.17.28, update to version 1.17.28 or later to resolve the issue...