EUVD-2022-2061

Malicious code in bioql PyPI...

Authentication Bypass

Apache Shiro-web is vulnerable to authentication bypass. Lack of proper handling of servletPath parameter in the request allows an attacker to inject malicious string via the request parameter and bypass authentication...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.1 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Authorization Bypass

undertow is vulnerable to authorization bypass. The vulnerability exists in servletPath in normalized incorrectly leading to dangerous application mapping which could result in security bypass...

CVE-2020-1757

A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path after semicolon which may lead to an...

CVE-2020-1757: Improper Input Validation

A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path after semicolon which may lead to an...

PT-2020-15038

Name of the Vulnerable Software and Affected Versions undertow versions prior to 2.0.30.SP1 undertow versions prior to 2.1.0.Final Description A flaw was found in the Servlet container where it causes servletPath to normalize incorrectly by truncating the path after a semicolon, which may lead to...