CVE-2021-22001

In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in response when deletion request of an identity provider IdP of type “oauth 1.0” was sent to UAA server...

Cross site request forgery (csrf)

In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in response when deletion request of an identity provider IdP of type “oauth 1.0” was sent to UAA server...

ai.foremast.metrics:foremast-spring-boot-1x-k8s-metrics-starter (>=0.1.6, <=0.1.7), ai.foremast.metrics:foremast-spring-boot-k8s-metrics-starter (>=0.1.4-sb1x, <=0.1.4-sb1x_6) +15264 more potentially affected by CVE-2018-1272 via org.springframework:spring-core (>=4.0.0.release, <=4.3.14.release)

org.springframework:spring-core MAVEN version =4.0.0.release, =0.1.6, =0.1.4-sb1x, =0.1.0, =4.0.2, =4.0.0, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =1.1.0.release, =1.1.0.release, =1.1.4.release and more Source cves: CVE-2018-1272 Source advisory: GHSA-4487-X383-QPPH...

am.ik.home:uaa-server (>=1.0.0, <=1.9.0), am.ik.servicebroker:cloud-karafka-service-broker (>=0.0.2, <=0.0.3) +2935 more potentially affected by CVE-2018-8037 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.5, <=8.5.31)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.5, =1.0.0, =0.0.2, =0.0.3, =0.0.1, =0.2.0, =1.0.3, =0.2.1, =0.1.1, =0.1.1, =0.7, =0.8 and more Source cves: CVE-2018-8037 Source advisory: GHSA-6V52-MJ5R-7J2M...