Lucene search
+L

10 matches found

osv-ghsa
osv-ghsa
•added 2024/12/02 6:41 p.m.•31 views

GHSA-4H8F-C635-25P7 ibexa/post-install affected by Breach with Varnish VCL

Impact This is not a vulnerability in the code per se, but included platform.sh Varnish VCL templates and Apache/Nginx vhost templates enable compression of API and JSON messages. This is a potential case of the BREACH vulnerability, which affects HTTP compression, where secrets can be extracted...

7.2AI score
SaveExploits0References9
Github Security Blog
Github Security Blog
•added 2024/12/02 6:41 p.m.•45 views

ibexa/post-install affected by Breach with Varnish VCL

Impact This is not a vulnerability in the code per se, but included platform.sh Varnish VCL templates and Apache/Nginx vhost templates enable compression of API and JSON messages. This is a potential case of the BREACH vulnerability, which affects HTTP compression, where secrets can be extracted...

7.2AI score
SaveExploits0References9Affected Software1
osv-ghsa
osv-ghsa
•added 2024/12/02 6:39 p.m.•24 views

GHSA-FH7V-Q458-7VMW ibexa/http-cache affected by Breach with Varnish VCL

Impact This is not a vulnerability in the code per se, but included Varnish VCL templates enable compression of API and JSON messages. This is a potential case of the BREACH vulnerability, which affects HTTP compression, where secrets can be extracted through carefully crafted requests. The fix...

7.2AI score
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2024/12/02 6:39 p.m.•24 views

ibexa/http-cache affected by Breach with Varnish VCL

Impact This is not a vulnerability in the code per se, but included Varnish VCL templates enable compression of API and JSON messages. This is a potential case of the BREACH vulnerability, which affects HTTP compression, where secrets can be extracted through carefully crafted requests. The fix...

7.2AI score
SaveExploits0References8Affected Software1
Github Security Blog
Github Security Blog
•added 2024/12/02 6:37 p.m.•32 views

ezsystems/ezplatform-http-cache affected by Breach with Varnish VCL

Impact This is not a vulnerability in the code per se, but included Varnish VCL templates enable compression of API and JSON messages. This is a potential case of the BREACH vulnerability, which affects HTTP compression, where secrets can be extracted through carefully crafted requests. The fix...

7.2AI score
SaveExploits0References8Affected Software1
osv-ghsa
osv-ghsa
•added 2024/12/02 6:37 p.m.•48 views

GHSA-MGFG-7533-7JF6 ezsystems/ezplatform-http-cache affected by Breach with Varnish VCL

Impact This is not a vulnerability in the code per se, but included Varnish VCL templates enable compression of API and JSON messages. This is a potential case of the BREACH vulnerability, which affects HTTP compression, where secrets can be extracted through carefully crafted requests. The fix...

7.2AI score
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2024/12/02 12:00 a.m.•4 views

PT-2024-40272

Name of the Vulnerable Software and Affected Versions: ibexa/http-cache affected versions not specified Description: The issue is related to the BREACH vulnerability, which affects HTTP compression and can allow secrets to be extracted through carefully crafted requests. This is due to included...

5.7AI score
SaveExploits0References9
Fedora
Fedora
•added 2022/08/30 9:06 a.m.•54 views

[SECURITY] Fedora 36 Update: varnish-modules-0.19.0-5.fc36

This is a collection of modules "vmods" extending Varnish VCL used for describing HTTP request/response policies with additional capabilities. This collection contains the following vmods: bodyaccess, header, saintmode, tcp, var, vsthrottle, xkey...

7.5CVSS0.8AI score0.01416EPSS
SaveExploits0
Fedora
Fedora
•added 2022/02/16 1:28 a.m.•45 views

[SECURITY] Fedora 35 Update: varnish-modules-0.18.0-5.fc35

This is a collection of modules "vmods" extending Varnish VCL used for describing HTTP request/response policies with additional capabilities. This collection contains the following vmods: bodyaccess, header, saintmode, tcp, var, vsthrottle, xkey...

9.1CVSS0.8AI score0.02011EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2021/03/22 12:00 a.m.•58 views

Fedora: Security Advisory for varnish-modules (FEDORA-2021-2ad352ec70)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.01495EPSS
SaveExploits0References2
Rows per page
Query Builder