CVE-2023-21846

CVE-2023-21846 affects Oracle BI Publisher (Security component) in Oracle Fusion Middleware. Affects: Oracle BI Publisher versions 5.9.0.0.0, 6.4.0.0.0 and 12.2.1.4.0. Description across sources states an easily exploitable vulnerability that allows a low-privileged attacker with network access v...

CVE-2023-21841

The CVE-2023-21841 entry concerns Oracle WebLogic Server (Core) with affected versions 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. A vulnerability exists that enables an unauthenticated attacker who has network access via T3 or IIOP to compromise the WebLogic Server, potentially leading to unauthorize...

CVE-2023-21837

CVE-2023-21837 - Oracle WebLogic Server (Core) vulnerability : Affected versions are 12.2.1.3.0–12.2.1.4.0 and 14.1.1.0.0. The issue arises from insufficient input validation in the Core component, exploitable by an unauthenticated attacker over IIOP to disclose or potentially access sensitive da...

CVE-2023-21838

The CVE-2023-21838 entry affects Oracle WebLogic Server (Fusion Middleware Core) with versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. The issue is due to insufficient input validation in the Core component, allowing an unauthenticated attacker with network access via T3 or IIOP to trigger a hang...

CVE-2023-21839

CVE-2023-21839 affects Oracle WebLogic Server (core) versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. It is exploitable via unauthenticated network access over T3/IIOP and relates to post-deserialization of a ForeignOpaqueReference object, enabling remote code execution as the oracle user. Multip...

CVE-2023-21832

CVE-2023-21832 affects Oracle BI Publisher (Oracle Fusion Middleware Security). Vulnerable in affected versions: 5.9.0.0.0, 6.4.0.0.0, and 12.2.1.4.0. Public sources consistently describe it as an easily exploitable, network-access vulnerability with the potential for takeover of Oracle BI Publis...

Open Redirect

oidc-middleware is vulnerable to open redirect. The vulnerability exists because the ensureAuthenticated function of oidcUtil.js does not properly validate the request URLs, allowing an attacker to redirect the user to malicious URLs...

CVE-2022-3145

An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL...

Open redirect

An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL...

CVE-2022-3145

An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL...

Okta NodeJS OIDC Middleware 输入验证错误漏洞

Okta NodeJS OIDC Middleware is an Okta open source OIDC support for Fortran applications. A security vulnerability exists in Okta NodeJS OIDC Middleware versions prior to 5.0.0, which stems from the presence of an open redirection vulnerability that allows an attacker to redirect a user to an...

CVE-2022-3145

CVE-2022-3145 affects Okta OIDC Middleware before 5.0.0. The root cause is an open redirect due to insufficient validation of redirect URLs in the authentication flow (e.g., ensureAuthenticated). This enables an attacker to redirect users to arbitrary, attacker-controlled URLs after login. Remedi...

@okta/oidc-middlewareOpen Redirect vulnerability

An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL. Affected products and versions Okta OIDC Middleware prior to version 5.0.0. Resolution The vulnerability is fixed in OIDC Middleware 5.0.0. To remediat...

GHSA-58H4-9M7M-J9M4 @okta/oidc-middlewareOpen Redirect vulnerability

An open redirect vulnerability exists in Okta OIDC Middleware prior to version 5.0.0 allowing an attacker to redirect a user to an arbitrary URL. Affected products and versions Okta OIDC Middleware prior to version 5.0.0. Resolution The vulnerability is fixed in OIDC Middleware 5.0.0. To remediat...

PT-2023-13036 · Okta · Okta Oidc Middleware

Name of the Vulnerable Software and Affected Versions: Okta OIDC Middleware versions prior to 5.0.0 Description: An open redirect issue exists, allowing an attacker to redirect a user to an arbitrary URL. To exploit this, an attacker would need to send a victim a malformed URL containing a target...

PT-2023-15885 · Unknown · Evolution Events Artaxerxes

Name of the Vulnerable Software and Affected Versions: Evolution Events Artaxerxes affected versions not specified Description: A vulnerability was found in the component POST Parameter Handler, affecting unknown code of the file arta/common/middleware.py. The manipulation of the password argumen...

Artaxerxes 信息泄露漏洞

Artaxerxes is an Evolution Events open source evolutionary event information system. Artaxerxes suffers from an information disclosure vulnerability that stems from unknown code in the arta/common/middleware.py file of its POST Parameter Handler component that manipulates the parameter password...

Important: Red Hat Bug Fix Advisory: updated RHEL-8 based Middleware Containers container images

Updated RHEL-8 based Middleware Containers container images are now available The RHEL-8 based Middleware Containers container images have been updated to address the following security advisory: RHSA-2022:9058 see References Users of RHEL-8 based Middleware Containers container images are advise...

CVE-2020-36567

A flaw was found in gin. This issue occurs when the default Formatter for the Logger middleware LoggerConfig.Formatter, which is included in the Default engine, allows attackers to inject arbitrary log entries by manipulating the request path...

handlers 访问控制错误漏洞

handlers is an open source collection of useful middleware for HTTP services and web applications from Gorilla Web Toolkit. A security vulnerability exists in handlers, which stems from a CORS handler that uses incorrect CORS headers...