CVE-2022-22932

CVE-2022-22932 affects Apache Karaf via partial path traversal in obr:* commands and the karaf-maven-plugin run goal, which could allow breaking out of the designated folder. The issue is considered low risk in the public description, since obr:* usage is limited and the entry is user-controlled....

CVE-2019-0226

CVE-2019-0226 affects Apache Karaf Config service. A relative path traversal via the install method (via service or MBean) could be used to traverse directories and overwrite files. Any Karaf version before 4.2.5 is affected; impact depends on the filesystem permissions of the Karaf process user....

CVE-2014-0219

Apache Karaf before 4.0.10 is affected by CVE-2014-0219. The issue allows local users to trigger a denial of service by sending a shutdown command to the shutdown port exposed on the loopback interface, targeting all listening high ports. The vulnerability stems from a misconfigured shutdown port...