27 matches found
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
wildfly-clustering-faces-mojarra: com.sun.faces:jsf-impl: org.glassfish:jakarta.faces: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include
A flaw was found in EAP. Any estate hosting a JSF app using the user-controlled-include pattern would permit EL injection, achieving unauthenticated RCE as the server process user...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
wildfly-clustering-faces-mojarra: com.sun.faces:jsf-impl: org.glassfish:jakarta.faces: mojarra: Unauthenticated RCE in EAP JSF applications via EL injection in ui:include
A flaw was found in EAP. Any estate hosting a JSF app using the user-controlled-include pattern would permit EL injection, achieving unauthenticated RCE as the server process user...
jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: Jboss Deserialization RCE via Unfiltered River Unmarshaller
A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class filtering — enabling RCE via deserialization gadget chains on every cluster node...
com.github.psi-probe:psi-probe-tomcat85 (>=4.1.3, <=4.1.4), org.apache.tomcat:tomcat-catalina (8.5.99) +5 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (8.5.99)
org.apache.tomcat:tomcat-coyote MAVEN version 8.5.99 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 =4.1.3, =21.0.0.final, =21.0.0.final, =22.0.0.final Sour...
com.github.psi-probe:psi-probe-tomcat85 (4.0.0), org.apache.tomcat:tomcat-catalina (8.5.95) +5 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (8.5.95)
org.apache.tomcat:tomcat-coyote MAVEN version 8.5.95 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 4.0.0 - org.apache.tomcat:tomcat-catalina 8.5.95 -...
org.apache.tomcat:tomcat-catalina (8.5.63), org.apache.tomcat:tomcat-catalina-ha (8.5.63) +5 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (8.5.63)
org.apache.tomcat:tomcat-coyote MAVEN version 8.5.63 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - org.apache.tomcat:tomcat-catalina 8.5.63 - org.apache.tomcat:tomcat-catalina-ha 8.5.63 -...
com.github.psi-probe:psi-probe-tomcat85 (3.7.3), org.apache.tomcat:tomcat-catalina (8.5.88) +5 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (8.5.88)
org.apache.tomcat:tomcat-coyote MAVEN version 8.5.88 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.7.3 - org.apache.tomcat:tomcat-catalina 8.5.88 -...
com.github.psi-probe:psi-probe-tomcat85 (3.2.0), com.github.waffle:waffle-tomcat85 (>=2.0.0-beta1, <=2.0.0-beta2) +7 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (8.5.37)
org.apache.tomcat:tomcat-coyote MAVEN version 8.5.37 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.2.0 - com.github.waffle:waffle-tomcat85 =2.0.0-beta1,...
com.github.psi-probe:psi-probe-tomcat8 (3.1.0), com.github.waffle:waffle-tomcat8 (1.9.1) +7 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (8.0.52)
org.apache.tomcat:tomcat-coyote MAVEN version 8.0.52 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - com.github.psi-probe:psi-probe-tomcat8 3.1.0 - com.github.waffle:waffle-tomcat8 1.9.1 -...
com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.1.1), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.5.1) +8 more potentially affected by CVE-2025-31651 via org.apache.tomcat:tomcat-catalina (>=11.0.0-m3, <=11.0.5)
org.apache.tomcat:tomcat-catalina MAVEN version =11.0.0-m3, =5.0.0, =3.4.0, =2.5.8, =11.0.0-m3, =11.0.0-m3, =24.0.0.final, =24.0.0.final, =26.0.0.beta1 Source cves: CVE-2025-31651 Source advisory: GHSA-FF77-26X5-69CR...
com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.1.1), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.5.1) +6 more potentially affected by CVE-2025-24813 via org.apache.tomcat:tomcat-catalina (>=11.0.0-m1, <=11.0.2)
org.apache.tomcat:tomcat-catalina MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =11.0.0-m1, =11.0.0-m1, =24.0.0.final, =24.0.0.final, =26.0.0.beta1 Source cves: CVE-2025-24813 Source advisory: MEND:CVE-2025-24813...
com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.1.1), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.5.0) +4 more potentially affected by CVE-2024-50379 +1 more via org.apache.tomcat:tomcat-catalina (>=11.0.0-m1, <=11.0.1)
org.apache.tomcat:tomcat-catalina MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =11.0.0-m1, =11.0.0-m1, =11.0.1 - org.wildfly.clustering:wildfly-clustering-tomcat-11.0-catalina 24.0.0.final - org.wildfly.clustering:wildfly-clustering-tomcat-11.0-infinispan-remote 24.0.0.final Source cves:...
org.apache.tomcat:tomcat-catalina-ha (8.5.71), org.apache.tomcat:tomcat-catalina-jmx-remote (8.5.71) +4 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.71)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.71 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.71 - org.apache.tomcat:tomcat-catalina-jmx-remote...
com.github.psi-probe:psi-probe-tomcat85 (3.5.4), org.apache.tomcat:tomcat-catalina-ha (8.5.64) +5 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.64)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.64 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.4 - org.apache.tomcat:tomcat-catalina-ha 8.5.64 ...
de.javakaffee.msm:memcached-session-manager-tc8 (>=y, <=2.3.2), org.apache.tomcat:tomcat-catalina-ha (8.5.29) +7 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.29)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.29 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager-tc8 =y, =3.5.0, =3.5.0, =3.5.4 -...
org.apache.tomcat:tomcat-catalina-ha (8.5.68), org.apache.tomcat:tomcat-catalina-jmx-remote (8.5.68) +4 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (8.5.68)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.68 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.68 - org.apache.tomcat:tomcat-catalina-jmx-remote...