Security Advisories | GitStock

critical2022-09-23

CVE-2021-36782-Rancher API and cluster.management.cattle.io object vulnerable to plaintext storage and exposure of credentials

rancher/rancher · GHSA-g7j7-h4q8-8w2f

medium2022-09-23

CVE-2022-2256-Keycloak vulnerable to Stored Cross site Scripting (XSS) when loading default roles

keycloak/keycloak · GHSA-w9mf-83w3-fv49

high2022-09-23

CVE-2022-2668-Keycloak SAML javascript protocol mapper: Uploading of scripts through admin console

keycloak/keycloak · GHSA-wf7g-7h6h-678v

high2022-09-23

lakeFS vulnerable to authenticated users deleting files they are not authorized to delete

treeverse/lakefs · GHSA-28q9-9c3g-v3f9

medium2022-09-23

CVE-2022-28982-Liferay Portal and Liferay DXP Vulnerable to XSS via Tag Name

liferay/liferay-portal · GHSA-wffm-j7m8-93g4

medium2022-09-23

CVE-2022-28977-Liferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be Circumvented

liferay/liferay-portal · GHSA-w397-9p2j-6x23

medium2022-09-23

CVE-2022-38512-Liferay Portal and Liferay DXP Fails to Check Permissions in Translation Module

liferay/liferay-portal · GHSA-h9ww-wjg4-jvvg

medium2022-09-23

CVE-2022-28980-Liferay Portal and Liferay DXP Vulnerable to XSS via the filter_ Prefix

liferay/liferay-portal · GHSA-8mp9-w7gr-pvj3

medium2022-09-23

CVE-2022-39975-Liferay Portal Missing Authorization vulnerability

liferay/liferay-portal · GHSA-83qx-288m-72w4

medium2022-09-23

CVE-2022-28979-Liferay Portal and Liferay DXP Vulnerable to XSS in the Portal Search Module

liferay/liferay-portal · GHSA-7r3w-wggm-pjwf

medium2022-09-23

CVE-2022-28978-Liferay Portal and Liferay DXP Vulnerable to XSS in the Site Module

liferay/liferay-portal · GHSA-7m65-hmvg-rxpc

critical2022-09-23

CVE-2022-40186-HashiCorp Vault vulnerable to incorrect metadata access

hashicorp/vault · GHSA-7cgv-v83v-rr87

high2022-09-23

CVE-2022-28981-Liferay Portal Path Traversal Vulnerability via the Hypermedia REST APIs Module

liferay/liferay-portal · GHSA-5j86-vmpx-42pc

high2022-09-23

CVE-2022-40146-Apache Batik vulnerable to Server-Side Request Forgery

apache/xmlgraphics-batik · GHSA-h4qg-p7r2-cpg3

medium2022-09-23

CVE-2022-38648-Apache Batik vulnerable to Server-Side Request Forgery

apache/xmlgraphics-batik · GHSA-53jm-3hc9-fqqc

medium2022-09-23

CVE-2022-38398-Apache Batik Server-Side Request Forgery

apache/xmlgraphics-batik · GHSA-c5xv-qc8p-mh2v

high2022-09-23

CVE-2022-3274-rdiffweb Cross-Site Request Forgery vulnerability can lead to user email ID being changed

ikus060/rdiffweb · GHSA-gmj8-84r4-h46j

high2022-09-23

CVE-2022-34026-ICEcoder vulnerable to Path Traversal

icecoder/icecoder · GHSA-fvf5-xp83-vrqp

medium2022-09-23

CVE-2022-3267-rdiffweb Cross-Site Request Forgery vulnerability

ikus060/rdiffweb · GHSA-74j6-3hh4-w3f5

medium2022-09-23

CVE-2022-23458-Toast UI Grid vulnerable to Cross-site Scripting

nhn/tui.grid · GHSA-9rwj-9j2h-fhvm