Security Advisories | GitStock

critical2022-05-24

CVE-2021-21692-Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins

jenkinsci/jenkins · GHSA-8xg4-xq2v-v6j7

critical2022-05-24

CVE-2021-21685-Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins

jenkinsci/jenkins · GHSA-58xm-mxjf-254g

critical2022-05-24

CVE-2021-21687-Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins

jenkinsci/jenkins · GHSA-3q84-vrvx-rfvf

critical2022-05-24

CVE-2021-21691-Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins

jenkinsci/jenkins · GHSA-2c79-h2h5-g3fw

medium2022-05-24

CVE-2021-21698-Path traversal vulnerability in Jenkins Subversion Plugin allows reading arbitrary files

jenkinsci/subversion-plugin · GHSA-q58j-fhj7-j6fg

critical2022-05-24

CVE-2021-21695-Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins

jenkinsci/jenkins · GHSA-cvvm-4cr9-r436

critical2022-05-24

CVE-2021-21697-Agent-to-controller access control allows reading/writing most content of build directories in Jenkins

jenkinsci/jenkins · GHSA-cv2w-q8c3-xjv7

high2022-05-24

CVE-2021-21696-Agent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries Plugin

jenkinsci/jenkins · GHSA-c5r9-rx53-q3gf

high2022-05-24

CVE-2021-42057-Obsidian Dataview vulnerable to code injection due to unsafe eval

blacksmithgu/obsidian-dataview · GHSA-xfg5-vrmc-24wc

high2022-05-24

CVE-2021-42697-Uncontrolled Recursion in Akka HTTP

akka/akka-http · GHSA-3hw2-h67c-wq66

medium2022-05-24

CVE-2021-22096-Improper Output Neutralization for Logs in Spring Framework

spring-projects/spring-framework · GHSA-rfmp-97jj-h8m6

medium2022-05-24

CVE-2020-28957-Foxlor cross-site scripting (XSS) vulnerability

froxlor/froxlor · GHSA-cv24-vh45-4hjm

critical2022-05-24

CVE-2021-42740-Improper Neutralization of Special Elements used in a Command in Shell-quote

ljharb/shell-quote · GHSA-g4rg-993r-mgx7

medium2022-05-24

CVE-2021-25971-Camaleon CMS vulnerable to Uncaught Exception

owen2345/camaleon-cms · GHSA-r2w2-h6r8-3r53

medium2022-05-24

CVE-2021-25972-Camaleon CMS vulnerable to Server-Side Request Forgery

owen2345/camaleon-cms · GHSA-vx6p-q4gj-x6xx

high2022-05-24

CVE-2021-3869-Improper Restriction of XML External Entity Reference in Stanford CoreNLP

stanfordnlp/corenlp · GHSA-8gf7-w3cp-gfh3

medium2022-05-24

CVE-2021-32609-Apache Superset Cross-site Scripting (XSS) vulnerability on the Explore page

apache/superset · GHSA-f8vc-f28w-x9c9

high2022-05-24

CVE-2021-41971-Apache Superset SQL Injection when template processing is enabled

apache/superset · GHSA-pg8m-4p8j-2p56

critical2022-05-24

CVE-2021-3878-Improper Restriction of XML External Entity Reference in Stanford CoreNLP

stanfordnlp/corenlp · GHSA-5h9g-8xcv-qjq9

critical2022-05-24

CVE-2021-40720-Ops CLI Deserialization of Untrusted Data vulnerability

adobe/ops-cli · GHSA-x23q-4j9j-9cxw