114 matches found
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.ylyue:yue-library-auth-client (>=j11.2.6.0, <=j11.2.6.1) +1185 more potentially affected by CVE-2023-34034 via org.springframework.security:spring-security-config (>=5.6.0, <=5.6.10)
org.springframework.security:spring-security-config MAVEN version =5.6.0, =4.4.0.2, =j11.2.6.0, =j11.2.6.0, =0.2.0, =0.8.3, =2.1.0.m8, =1.0.0, =2.7.0.beta4, =2.7.0.beta3, =2.7.0.beta3, =2.7.0.beta1, =2.7.0.beta1, =2.7.0.beta1, =2.7.0.beta2 and more Source cves: CVE-2023-34034 Source advisory:...
au.csiro.pathling:fhir-server (>=5.3.1, <=6.3.0), cc.hiver:hiver-core (>=1.0, <=1.0.4) +1266 more potentially affected by CVE-2023-34034 via org.springframework.security:spring-security-config (>=5.7.0, <=5.7.9)
org.springframework.security:spring-security-config MAVEN version =5.7.0, =5.3.1, =1.0, =0.0.1, =2.0.1, =0.2.2, =0.0.1-alpha.1, =2.7.7.3, =2.7.7.4, =2.7.0.0, =2.7.0.0, =2.7.7.3 and more Source cves: CVE-2023-34034 Source advisory: MEND:CVE-2023-34034...
cc.vihackerframework:vihacker-security-starter (1.0.8.r), city.smartb.fs:f2-spring-boot-starter-auth-tenant (>=0.15.0-rc1, <=0.15.0) +400 more potentially affected by CVE-2023-34034 via org.springframework.security:spring-security-config (>=6.0.0, <=6.0.4)
org.springframework.security:spring-security-config MAVEN version =6.0.0, =0.15.0-rc1, =0.12.0, =0.12.0, =0.15.0-rc1, =0.12.0, =0.13.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =2023.0.0.2-alpha.1, =2023.0.0.0, =2023.0.0.1, =2023.0.0.2-alpha.2 and more Source cves: CVE-2023-34034 Source...
cc.vihackerframework:vihacker-security-starter (1.0.8.r), city.smartb.fs:f2-spring-boot-starter-auth-tenant (>=0.15.0-rc1, <=0.15.0) +400 more potentially affected by CVE-2023-34035 via org.springframework.security:spring-security-config (>=6.0.0, <=6.0.4)
org.springframework.security:spring-security-config MAVEN version =6.0.0, =0.15.0-rc1, =0.12.0, =0.12.0, =0.15.0-rc1, =0.12.0, =0.13.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =2023.0.0.2-alpha.1, =2023.0.0.0, =2023.0.0.1, =2023.0.0.2-alpha.2 and more Source cves: CVE-2023-34035 Source...
com.erudika:para-jar (>=1.48.0, <=1.48.2), com.erudika:para-server (>=1.48.0, <=1.48.2) +120 more potentially affected by CVE-2023-34035 via org.springframework.security:spring-security-config (>=5.8.0, <=5.8.4)
org.springframework.security:spring-security-config MAVEN version =5.8.0, =1.48.0, =1.48.0, =1.48.0, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =1.3.1, =1.3.2 - com.gitlab.summer-cattle:cattle-addons-wechat-starter 0.0.5 and more Source cves: CVE-2023-34035 Source advisory: OSV:GHSA-4VPR-XFRP-CJ64...
com.erudika:para-jar (>=1.48.0, <=1.48.2), com.erudika:para-server (>=1.48.0, <=1.48.2) +120 more potentially affected by CVE-2023-34035 via org.springframework.security:spring-security-config (>=5.8.0, <=5.8.4)
org.springframework.security:spring-security-config MAVEN version =5.8.0, =1.48.0, =1.48.0, =1.48.0, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =1.3.1, =1.3.2 - com.gitlab.summer-cattle:cattle-addons-wechat-starter 0.0.5 and more Source cves: CVE-2023-34035 Source advisory: GHSA-4VPR-XFRP-CJ64...
br.com.nitertech:jwt (>=1.1.4.2, <=1.1.5), cn.herodotus.engine:oauth2-sdk-authentication (>=3.0.6.4, <=3.1.1.3) +314 more potentially affected by CVE-2023-34035 via org.springframework.security:spring-security-config (>=6.1.0, <=6.1.1)
org.springframework.security:spring-security-config MAVEN version =6.1.0, =1.1.4.2, =3.0.6.4, =3.0.6.4, =3.0.6.4, =3.0.6.4, =4.0.1, =4.0.1, =0.1.0, =6.1.11, =6.1.11, =7.0.0, =7.0.0, =6.1.11, =6.1.11, =6.2.0 and more Source cves: CVE-2023-34035 Source advisory: OSV:GHSA-4VPR-XFRP-CJ64...
br.com.nitertech:jwt (>=1.1.4.2, <=1.1.5), cn.herodotus.engine:oauth2-sdk-authentication (>=3.0.6.4, <=3.1.1.3) +314 more potentially affected by CVE-2023-34035 via org.springframework.security:spring-security-config (>=6.1.0, <=6.1.1)
org.springframework.security:spring-security-config MAVEN version =6.1.0, =1.1.4.2, =3.0.6.4, =3.0.6.4, =3.0.6.4, =3.0.6.4, =4.0.1, =4.0.1, =0.1.0, =6.1.11, =6.1.11, =7.0.0, =7.0.0, =6.1.11, =6.1.11, =6.2.0 and more Source cves: CVE-2023-34035 Source advisory: GHSA-4VPR-XFRP-CJ64...
cc.vihackerframework:vihacker-security-starter (1.0.8.r), city.smartb.fs:f2-spring-boot-starter-auth-tenant (>=0.15.0-rc1, <=0.15.0) +400 more potentially affected by CVE-2023-34035 via org.springframework.security:spring-security-config (>=6.0.0, <=6.0.4)
org.springframework.security:spring-security-config MAVEN version =6.0.0, =0.15.0-rc1, =0.12.0, =0.12.0, =0.15.0-rc1, =0.12.0, =0.13.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =2023.0.0.2-alpha.1, =2023.0.0.0, =2023.0.0.1, =2023.0.0.2-alpha.2 and more Source cves: CVE-2023-34035 Source...
com.erudika:para-jar (>=1.48.0, <=1.48.2), com.erudika:para-server (>=1.48.0, <=1.48.2) +120 more potentially affected by CVE-2023-34035 via org.springframework.security:spring-security-config (>=5.8.0, <=5.8.4)
org.springframework.security:spring-security-config MAVEN version =5.8.0, =1.48.0, =1.48.0, =1.48.0, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =1.3.1, =1.3.2 - com.gitlab.summer-cattle:cattle-addons-wechat-starter 0.0.5 and more Source cves: CVE-2023-34035 Source advisory: MEND:CVE-2023-34035...
cc.vihackerframework:vihacker-security-starter (1.0.8.r), city.smartb.fs:f2-spring-boot-starter-auth-tenant (>=0.15.0-rc1, <=0.15.0) +400 more potentially affected by CVE-2023-34035 via org.springframework.security:spring-security-config (>=6.0.0, <=6.0.4)
org.springframework.security:spring-security-config MAVEN version =6.0.0, =0.15.0-rc1, =0.12.0, =0.12.0, =0.15.0-rc1, =0.12.0, =0.13.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =3.0.1.0, =2023.0.0.2-alpha.1, =2023.0.0.0, =2023.0.0.1, =2023.0.0.2-alpha.2 and more Source cves: CVE-2023-34035 Source...
br.com.nitertech:jwt (>=1.1.4.2, <=1.1.5), cn.herodotus.engine:oauth2-sdk-authentication (>=3.0.6.4, <=3.1.1.3) +314 more potentially affected by CVE-2023-34035 via org.springframework.security:spring-security-config (>=6.1.0, <=6.1.1)
org.springframework.security:spring-security-config MAVEN version =6.1.0, =1.1.4.2, =3.0.6.4, =3.0.6.4, =3.0.6.4, =3.0.6.4, =4.0.1, =4.0.1, =0.1.0, =6.1.11, =6.1.11, =7.0.0, =7.0.0, =6.1.11, =6.1.11, =6.2.0 and more Source cves: CVE-2023-34035 Source advisory: MEND:CVE-2023-34035...
org.springframework.security:spring-security-acl (3.1.5.release), org.springframework.security:spring-security-aspects (3.1.5.release) +7 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.1.5.release)
org.springframework.security:spring-security-core MAVEN version 3.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.springframework.security:spring-security-acl...
com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-security-rt (>=1.20, <=1.22) +15 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.0.2.release)
org.springframework.security:spring-security-core MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20,...
com.github.btheu.settesting:spring (0.1.0), org.pac4j:spring-security-pac4j (>=1.2.3, <=1.2.4) +10 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.2.2.release)
org.springframework.security:spring-security-core MAVEN version 3.2.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.btheu.settesting:spring 0.1.0 -...
org.apache.syncope:syncope-core (>=1.0.9, <=1.1.8), org.springframework.security:spring-security-acl (3.1.6.release) +11 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.1.6.release)
org.springframework.security:spring-security-core MAVEN version 3.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.apache.syncope:syncope-core =1.0.9, =1.4.9, =1.4....
org.ff4j:ff4j-security-spring (>=1.0.0, <=1.1.0), org.springframework.security:spring-security-acl (3.0.8.release) +7 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.0.8.release)
org.springframework.security:spring-security-core MAVEN version 3.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.ff4j:ff4j-security-spring =1.0.0, =1.1.0 -...
com.silicolife.textmining:core (>=1.0.3, <=1.1.0), org.ff4j:ff4j-security-spring (>=1.8.2, <=1.8.7) +24 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.1.5.release)
org.springframework.security:spring-security-core MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.silicolife.textmining:core =1.0.3, =1.8.2, =1.8.7...
br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2), com.keyholesoftware:khs-sherpa-spring (>=1.2.0, <=1.2.1) +15 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (3.0.0.release)
org.springframework.security:spring-security-core MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - br.net.woodstock.rockframework:rockframework-domain...
GHSA-F553-J2GV-G5R9 Apache Solr Kerberos delegation token functionality flaws
Apache Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the authentication of an end-user or another application. There are two issues with this functionality when using SecurityAwareZkACLProvider type of ACL provider e.g. SaslZkACLProvider...