Unintended Proxy or Intermediary ('Confused Deputy')

Overview Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' through the impersonation middleware in pkg/auth/requests/sar/middleware.go and the SAR wiring in pkg/multiclustermanager/routes.go. An authenticated user can gain administrative access...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' through the impersonation middleware in pkg/auth/requests/sar/middleware.go and the SAR wiring in pkg/multiclustermanager/routes.go. An authenticated user can gain administrative access...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' through the impersonation middleware in pkg/auth/requests/sar/middleware.go and the SAR wiring in pkg/multiclustermanager/routes.go. An authenticated user can gain administrative access...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' through the impersonation middleware in pkg/auth/requests/sar/middleware.go and the SAR wiring in pkg/multiclustermanager/routes.go. An authenticated user can gain administrative access...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview github.com/rancher/rancher/pkg/clusterrouter is a project that provides a container management platform built for organizations that deploy containers in production Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' through the...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime through the checkcertocspresp function in crypto/x509/x509vfy.c. An attacker can exhaust memory in a TLS client by supplying a stapled OCSP BasicResponse with no single-response entries...

Authentication Bypass by Primary Weakness

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness in the ProtocolResponse.url when a custom protocol handler omits the session...

Authentication Bypass by Primary Weakness

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness in the ProtocolResponse.url when a custom protocol handler omits...

Server-side Request Forgery (SSRF)

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the net.fetch or net.request. An attacker can access local file conten...

Server-side Request Forgery (SSRF)

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the net.fetch or net.request. An attacker can access local file contents by redirectin...

Permissive Cross-domain Policy with Untrusted Domains

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Permissive Cross-domain Policy with Untrusted Domains via the custom protocol handler when supportFetchAPI is enabled but...

Permissive Cross-domain Policy with Untrusted Domains

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Permissive Cross-domain Policy with Untrusted Domains via the custom protocol handler when supportFetchAPI ...

Exposure of Data Element to Wrong Session

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session via the extension tab and scripting APIs not being properly scoped to the...

Exposure of Data Element to Wrong Session

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session via the extension tab and scripting APIs not being properly scope...

Improper Neutralization of Null Byte or NUL Character

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Neutralization of Null Byte or NUL Character via the shell.openPath function. An attacker can bypa...

Improper Neutralization of Null Byte or NUL Character

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Neutralization of Null Byte or NUL Character via the shell.openPath function. An attacker can bypass file path...

Origin Validation Error

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Origin Validation Error in contextBridge. An attacker can gain access to the isolated preload world and its capabilities by...

Origin Validation Error

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Origin Validation Error in contextBridge. An attacker can gain access to the isolated preload world and its...

Improper Restriction of Rendered UI Layers or Frames

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Restriction of Rendered UI Layers or Frames in the handling of cross-origin iframes, which allows the native...

Improper Restriction of Rendered UI Layers or Frames

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Improper Restriction of Rendered UI Layers or Frames in the handling of cross-origin iframes, which allows...

Origin Validation Error

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Origin Validation Error in the setPermissionCheckHandler. An attacker can gain unauthorized access to device permissions by...

Origin Validation Error

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Origin Validation Error in the setPermissionCheckHandler. An attacker can gain unauthorized access to devic...

Out-of-bounds Read

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read in the paint event image generation process when offscreen rendering is enabled. An...

Out-of-bounds Read

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Out-of-bounds Read in the paint event image generation process when offscreen rendering is enabled. An attacker can cause...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the parent process code-sign verification on macOS. An attacker can...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the parent process code-sign verification on macOS. An...

Cross-site Scripting (XSS)

Overview ghost is a publishing platform Affected versions of this package are vulnerable to Cross-site Scripting XSS via the selectedRevision path in the post history modal and feature image caption rendering code. An attacker can execute script in another staff user’s Admin session by creating o...

Server-side Request Forgery (SSRF)

Overview ghost is a publishing platform Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through the comments and Webmentions URL resolution in comments-service-emails.js and comments.js. An attacker can make the server issue limited HTTP requests to hosts on t...

Prototype Pollution

Overview @theia/core is a the main extension for all Theia-based applications, and provides the main framework for all dependent extensions. Affected versions of this package are vulnerable to Prototype Pollution via the PreferenceUtils.merge function in PreferenceUtils within preference...

Directory Traversal

Overview @theia/plugin-ext is a Theia - Plugin Extension Affected versions of this package are vulnerable to Directory Traversal through the HostedPluginReader in plugin-reader, specifically the /hostedPlugin/:pluginId/:path resource handler. An attacker can read arbitrary files accessible to the...

Cross-site Request Forgery (CSRF)

Overview @theia/filesystem is a Theia - FileSystem Extension Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the NodeFileUploadService handler in the filesystem backend code. An attacker can overwrite any filesystem path the backend process can write by...

Improper Verification of Cryptographic Signature

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature during identity provider metadata import. An attacker can...

Server-side Request Forgery (SSRF)

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the rawproxy. An attacker can...

Directory Traversal

Overview org.webjars.npm:art-template is a simple and superfast templating engine that optimizes template rendering speed by scope pre-declared technique, hence achieving runtime performance which is close to the limits of JavaScript. At the same time, it supports both NodeJS and browser. Affecte...

Directory Traversal

Overview art-template is a simple and superfast templating engine that optimizes template rendering speed by scope pre-declared technique, hence achieving runtime performance which is close to the limits of JavaScript. At the same time, it supports both NodeJS and browser. Affected versions of th...

Cleartext Storage of Sensitive Information

Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information through the clusterregistrationtoken API/store paths, pkg/capr/planner/agent.go, pkg/provisioningv2/prebootstrap/resolve.go, and pkg/controllers/capr/managesystemagent/managesystemagent.go. An...

Cleartext Storage of Sensitive Information

Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information through the clusterregistrationtoken API/store paths, pkg/capr/planner/agent.go, pkg/provisioningv2/prebootstrap/resolve.go, and pkg/controllers/capr/managesystemagent/managesystemagent.go. An...

Cleartext Storage of Sensitive Information

Overview github.com/rancher/rancher/pkg/capr/planner is a project that provides a container management platform built for organizations that deploy containers in production Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information through the...

Cleartext Storage of Sensitive Information

Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information through the clusterregistrationtoken API/store paths, pkg/capr/planner/agent.go, pkg/provisioningv2/prebootstrap/resolve.go, and pkg/controllers/capr/managesystemagent/managesystemagent.go. An...

Cleartext Storage of Sensitive Information

Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information through the clusterregistrationtoken API/store paths, pkg/capr/planner/agent.go, pkg/provisioningv2/prebootstrap/resolve.go, and pkg/controllers/capr/managesystemagent/managesystemagent.go. An...

Cleartext Storage of Sensitive Information

Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information through the clusterregistrationtoken API/store paths, pkg/capr/planner/agent.go, pkg/provisioningv2/prebootstrap/resolve.go, and pkg/controllers/capr/managesystemagent/managesystemagent.go. An...

Cleartext Storage of Sensitive Information

Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information through the clusterregistrationtoken API/store paths, pkg/capr/planner/agent.go, pkg/provisioningv2/prebootstrap/resolve.go, and pkg/controllers/capr/managesystemagent/managesystemagent.go. An...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the copyReqBody function in pkg/auth/audit/log.go. An attacker can exhaust server memory and crash the Rancher Manager process by sending arbitrarily large HTTP request bodies...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the filterExistingCN logic in pkg/tls/podips.go for the tls-rancher-internal TLS listener. An attacker can bloat the serving certificate’s SAN list and eventually break TLS...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure in pkg/api/norman/customization/clusterregistrationtokens/import.go is vulnerable to an unauthenticated cluster-existence oracle through the /v3/import/tokenclusterId.yaml import endpoint. An attacker can enumerate...

Memory Allocation with Excessive Size Value

Overview org.apache.qpid:proton-j is a lightweight messaging library. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via improper handling of type size and count during the allocation process. An attacker can trigger excessive memory allocation by...

Allocation of Resources Without Limits or Throttling

Overview org.apache.qpid:proton-j is a lightweight messaging library. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via unbounded caching of symbol values. An attacker can exhaust system resources by sending specially crafted data prior t...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via unbounded symbol value caching in the AMQP 1.0 Symbol codec. An attacker can exhaust broker resources by sending pre-authentication AMQP 1.0 traffic that forces the codec to creat...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via unbounded caching in the symbol process. An attacker can exhaust system resources by sending specially crafted requests prior to authentication. Remediation Upgrade...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value via improper handling of type size and count during the pre-authentication process. An attacker can trigger excessive memory allocation by sending specially crafted input, potentially leading ...