11326 matches found
CVE-2025-30155 Tuleap does not enforce read permissions on parent trackers in the REST API
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap does not enforce read permissions on parent trackers in the REST API. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742392651 and Tuleap Enterprise Edition 16.5-5 and 16.4-8...
CVE-2025-30155 Tuleap does not enforce read permissions on parent trackers in the REST API
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap does not enforce read permissions on parent trackers in the REST API. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742392651 and Tuleap Enterprise Edition 16.5-5 and 16.4-8...
CVE-2025-30155 Tuleap does not enforce read permissions on parent trackers in the REST API
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap does not enforce read permissions on parent trackers in the REST API. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742392651 and Tuleap Enterprise Edition 16.5-5 and 16.4-8...
CVE-2025-30209 Tuleap has improper permission handling in the REST endpoints and release notes display of the FRS plugin
Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker can access release notes content or information via the FRS REST endpoints it should not have access to. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742812323 and Tule...
CVE-2025-30209 Tuleap has improper permission handling in the REST endpoints and release notes display of the FRS plugin
Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker can access release notes content or information via the FRS REST endpoints it should not have access to. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742812323 and Tule...
CVE-2025-30209
This CVE (CVE-2025-30209) concerns Tuleap, where an improper permission check allows an attacker to access release notes content or related information via the FRS REST endpoints. The vulnerability stems from access control weaknesses in the Tuleap software suite, specifically affecting the REST ...
PT-2025-13797 · Tuleap · Tuleap
Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 16.5.99.1742392651 Tuleap Enterprise Edition versions prior to 16.5-5 and 16.4-8 Description: The issue concerns the lack of enforcement of read permissions on parent trackers in the REST API. This affects the...
CVE-2024-58130
In app/Controller/Component/RestResponseComponent.php in MISP before 2.4.193, REST endpoints have a lack of sanitization for non-JSON responses...
Missing Release of Memory after Effective Lifetime
Overview org.infinispan:infinispan-server-rest is an Infinispan Rest Server. Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the REST compare API. A user can trigger an OutOfMemoryError by sending many requests with large 1 MiB POST data ...
io.micronaut.testresources:micronaut-test-resources-infinispan (>=3.0.0-m5, <=4.0.0-m1), io.quarkus:quarkus-test-infinispan-client (>=2.5.0.cr1, <=3.2.0.final) +54 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-server-rest (>=7.0.0.cr1, <=16.3.0.dev01)
org.infinispan:infinispan-server-rest MAVEN version =7.0.0.cr1, =3.0.0-m5, =2.5.0.cr1, =8.0.0.beta1, =7.0.0.cr1, =15.0.14.final, =9.3.0.cr1, =9.3.0.cr1, =8.0.0.alpha1, =9.0.0.beta1, =9.0.0.beta1, =15.0.0.cr1, =15.0.0.cr1, =12.1.1.final, =12.1.1.final, =16.2.2 and more Source cves: CVE-2024-6875...
Infinispan Potential Out of Memory Error via REST Compare API Buffer API
A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...
CVE-2024-6875
A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...
CVE-2024-6875 Infinispan: infinispan: rest compare api has buffer leak
A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...
CVE-2024-6875 Infinispan: infinispan: rest compare api has buffer leak
A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...
CVE-2024-6875 Infinispan: infinispan: rest compare api has buffer leak
A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...
CVE-2024-6875
CVE-2024-6875 concerns Infinispan in Red Hat Data Grid. The REST /compare API may leak buffers, enabling continual high-volume POST requests to trigger a buffer leak and an OutOfMemoryError. Documents consistently describe the REST API surface and the memory exhaustion risk, with no explicit fixe...
CVE-2024-6875
A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API...
MAL-2025-3012 Malicious code in twilio-rest (PyPI)
--- -= Per source details. Do not edit below this line.=-...
