5601 matches found
log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern
A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non-default Pattern Layout with a Context Lookup. Attackers with control over Thread Context Map MDC input data can craft malicious input data that contains a recursive lookup and can cause Denial of...
log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern
A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non-default Pattern Layout with a Context Lookup. Attackers with control over Thread Context Map MDC input data can craft malicious input data that contains a recursive lookup and can cause Denial of...
log4j-core: DoS in log4j 2.x with thread context message pattern and context lookup pattern (incomplete fix for CVE-2021-44228)
A flaw was found in the Apache Log4j logging library in versions from 2.0.0 and before 2.16.0. A remote attacker with control over Thread Context Map MDC input data could craft malicious input using a JNDI Lookup pattern resulting in remote code execution RCE in a limited number of environments...
log4j-core: DoS in log4j 2.x with Thread Context Map (MDC) input data contains a recursive lookup and context lookup pattern
A flaw was found in the Apache Log4j logging library 2.x. when the logging configuration uses a non-default Pattern Layout with a Context Lookup. Attackers with control over Thread Context Map MDC input data can craft malicious input data that contains a recursive lookup and can cause Denial of...
log4j-core: DoS in log4j 2.x with thread context message pattern and context lookup pattern (incomplete fix for CVE-2021-44228)
A flaw was found in the Apache Log4j logging library in versions from 2.0.0 and before 2.16.0. A remote attacker with control over Thread Context Map MDC input data could craft malicious input using a JNDI Lookup pattern resulting in remote code execution RCE in a limited number of environments...
Access control bypass in Beego
An issue was discovered in the route lookup process in beego through 2.0.1, allows attackers to bypass access control...
GHSA-28R6-JM5H-MRGG Access control bypass in Beego
An issue was discovered in the route lookup process in beego through 2.0.1, allows attackers to bypass access control...
Access control bypass
An issue was discovered in the route lookup process in beego through 2.0.1, allows attackers to bypass access control...
Access control bypass in Beego
An issue was discovered in the route lookup process in beego through 2.0.1, allows attackers to bypass access control...
CVE-2021-30080
An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control...
CVE-2021-30080
An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control...
CVE-2021-30080
An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control...
Improper access control
An issue was discovered in the route lookup process in beego through 2.0.1, allows attackers to bypass access control...
CVE-2021-30080
An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control...
CVE-2021-30080
An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control...
PT-2022-9950 · Beego · Beego
Name of the Vulnerable Software and Affected Versions: beego versions prior to 1.12.11 beego versions through 2.0.1 Description: An issue was discovered in the route lookup process in beego that allows attackers to bypass access control. Recommendations: For versions prior to 1.12.11, update to...
Beego 安全漏洞
Beego is an open source web framework based on the Go language. A security vulnerability existed prior to Beego 2.0.1 that stemmed from a route lookup process that allowed an attacker to bypass access control...
CVE-2021-30080: Undefined Security Weakness
An issue was discovered in the route lookup process in beego before 1.12.11 that allows attackers to bypass access control...
Golang net.Lookup Functions Data Compromise
The vulnerability of the net.LookupAddr,CNAME,Host functions in the Golang programming language is related to the lack of hostname filtering in the DNS server responses. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, a...