Maven Advisories.

Jenkins Delphix Plugin has improper SSL/TLS certificate validation

• Weak cryptography or TLS

>=3.0.1, <3.1.1 · fixed in 3.1.1

Jenkins Subversion Partial Release Manager Plugin missing permission check

• Broken access control

<=1.0.1 · no fixed version yet

Jenkins docker-build-step Plugin missing permission check

• Broken access control

<=2.11 · no fixed version yet

Jenkins docker-build-step Plugin Cross-Site Request Forgery vulnerability

• Cross-site request forgery (CSRF)

<=2.11 · no fixed version yet

Jenkins iceScrum Plugin vulnerable to stored Cross-site Scripting

• Cross-site scripting (XSS)

<=1.1.6 · no fixed version yet

Jenkins AppSpider Plugin missing permission checks

• Broken access control

<1.0.17 · fixed in 1.0.17

Jenkins HTML Publisher Plugin Stored XSS vulnerability

• Cross-site scripting (XSS)

<1.32.1 · fixed in 1.32.1

Jenkins Subversion Partial Release Manager Plugin vulnerable to Cross-Site Request Forgery

• Cross-site request forgery (CSRF)

<=1.0.1 · no fixed version yet

Jenkins Bitbucket Branch Source Plugin has incorrect trust policy behavior for pull requests

• CWE-281

<871.v28d74e8b_4226 · fixed in 871.v28d74e8b_4226

Jenkins OWASP Dependency-Check Plugin has stored XSS vulnerability

• Cross-site scripting (XSS)

<5.4.6 · fixed in 5.4.6

Jenkins HTML Publisher Plugin does not properly sanitize input

• Cross-site scripting (XSS)

>=1.16, <1.32.1 · fixed in 1.32.1

Jenkins MQ Notifier Plugin exposes sensitive information in build logs

• Information disclosure

<1.4.1 · fixed in 1.4.1

Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting

• Cross-site scripting (XSS)

<=0.8 · no fixed version yet

Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting

• Cross-site scripting (XSS)

<=1.14-860.vd06ef2568b · no fixed version yet

Jenkins HTML Publisher Plugin Path traversal vulnerability

• Path traversal

<1.32.1 · fixed in 1.32.1

Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged

• Information disclosure

<1.5.0 · fixed in 1.5.0

Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability

• Insecure deserialization

>=1.8.0, <1.11.0 · fixed in 1.11.0

Apache Archiva Incorrect Authorization vulnerability

• Broken access control

<=2.2.10 · no fixed version yet

Apache Archiva Reflected Cross-site Scripting vulnerability

• Cross-site scripting (XSS)

>=2.0.0, <=2.2.10 · no fixed version yet

Apache Archiva Incorrect Authorization vulnerability

• Broken access control

>=2.0.0, <=2.2.10 · no fixed version yet

Apache Ambari: Various Cross site scripting problems

• Cross-site scripting (XSS)
• CWE-20

<2.7.8 · fixed in 2.7.8

Reading specially crafted serializable objects from an untrusted source may cause an infinite loop and denial of service

• Insecure deserialization

>=1.7.0, <1.11.2 || >=1.12.0-alpha1, <1.12.0-alpha9 · fixed in 1.11.2, 1.12.0-alpha9

Duplicate Advisory: Keycloak DoS via account lockout

• CWE-645

<24.0.0 · fixed in 24.0.0

jose4j denial of service via specifically crafted JWE

• Denial of service

<0.9.4 · fixed in 0.9.4

Missing permission checks on Hazelcast client protocol

• Information disclosure
• CWE-281

<=4.1.10 || >=4.2, <=4.2.8 || >=5.0, <=5.0.5 || >=5.1, <=5.1.7 || >=5.2.0, <5.2.5 || >=5.3.0, <5.3.5 · fixed in 5.2.5, 5.3.5

Apache Ambari XML External Entity injection

• XML external entities (XXE)

>=2.7.0, <2.7.8 · fixed in 2.7.8

Apache James MIME4J improper input validation vulnerability

• Other injection
• CWE-20

<0.8.10 · fixed in 0.8.10

SMTP smuggling in Apache James

• Authentication bypass
• HTTP request smuggling

<3.7.5 || >=3.8.0, <3.8.1 · fixed in 3.7.5, 3.8.1

Apache Ambari: authenticated users could perform command injection to perform RCE

• Code injection

>=2.7.0, <2.7.8 · fixed in 2.7.8

Apache James server: Privilege escalation via JMX pre-authentication deserialization

• Insecure deserialization

<3.7.5 || >=3.8.0, <3.8.1 · fixed in 3.7.5, 3.8.1

Connection leaking on idle timeout when TCP congested

• Denial of service

>=9.3.0, <9.4.54 || >=10.0.0, <10.0.20 || >=11.0.0, <11.0.20 · fixed in 9.4.54, 10.0.20, 11.0.20

SAML authentication bypass due to missing validation on unsigned SAML messages

• CWE-1395

<0.64.3 · fixed in 0.64.3

Armeria SAML authentication bypass due to missing validation on unsigned SAML messages

• Authentication bypass

<1.27.2 · fixed in 1.27.2

Apache Camel data exposure vulnerability

• Information disclosure

>=3.0.0, <3.21.4 || >=3.22.0, <3.22.1 || >=4.0.0, <4.0.4 || >=4.1.0, <4.4.0 · fixed in 3.21.4, 3.22.1, 4.0.4, 4.4.0

Apache DolphinScheduler vulnerable to arbitrary JavaScript execution as root for authenticated users

• CWE-20

<3.2.1 · fixed in 3.2.1

Spring Web vulnerable to Open Redirect or Server Side Request Forgery

• Open redirect

>=6.1.0, <6.1.4 || >=6.0.0, <6.0.17 || >=5.3.0, <5.3.32 || <=5.2.25.RELEASE · fixed in 6.1.4, 6.0.17, 5.3.32

org.postgresql:postgresql vulnerable to SQL Injection via line comment generation

• SQL injection

<42.2.28 || >=42.3.0, <42.3.9 || >=42.4.0, <42.4.4 || >=42.5.0, <42.5.5 || >=42.6.0, <42.6.1 || >=42.7.0, <42.7.2 · fixed in 42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2

XWiki extension license information is public, exposing instance id and license holder details

• Broken access control

>=1.0, <1.24.2 · fixed in 1.24.2

Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting

• Cross-site scripting (XSS)

>=2023.Q3, <2023.Q3.6 || >=7.4.13.u18, <=7.4.13.u92 · fixed in 2023.Q3.6

Liferay Portal Calendar module and Liferay DXP vulnerable to Cross-site Scripting, content spoofing

• Cross-site scripting (XSS)

>=7.3.0, <7.3.10.u4 || >=7.2.0, <7.2.10.fp15 · fixed in 7.3.10.u4, 7.2.10.fp15

Liferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting

• Cross-site scripting (XSS)

>=7.4.13.u1, <7.4.13.u10 || >=7.3.10.ep3, <7.3.10.u4 || >=7.2.0, <7.2.10.fp17 · fixed in 7.4.13.u10, 7.3.10.u4, 7.2.10.fp17

Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting

• Cross-site scripting (XSS)

>=7.4.13.u1, <7.4.13.u38 || >=7.3.10.ep3, <7.3.10.u11 || >=7.2.0, <7.2.10.fp20 · fixed in 7.4.13.u38, 7.3.10.u11, 7.2.10.fp20

Liferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting

• Cross-site scripting (XSS)

>=7.4.13.u1, <=7.4.13.u102 || >=7.3.10.ep3, <7.3.10.u4 || >=7.2.0, <7.2.10.fp17 · fixed in 7.3.10.u4, 7.2.10.fp17

Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting

• Cross-site scripting (XSS)

>=7.3.0, <7.3.10.u4 || >=7.2.0, <7.2.10.fp15 · fixed in 7.3.10.u4, 7.2.10.fp15

Liferay Portal and Liferay DXP's Users Admin module vulnerable to stored Cross-site Scripting

• Cross-site scripting (XSS)

>=7.3.0, <7.3.10.u4 || >=7.2.0, <7.2.10.fp17 · fixed in 7.3.10.u4, 7.2.10.fp17

Liferay Portal Message Board widget and Liferay DXP vulnerable to stored Cross-site Scripting

• Cross-site scripting (XSS)

>=7.3.0, <7.3.10.u4 || >=7.2.0, <7.2.10.fp17 · fixed in 7.3.10.u4, 7.2.10.fp17

Liferay Portal Expando module and Liferay DXP vulnerable to stored Cross-site Scripting

• Cross-site scripting (XSS)

>=7.3.0, <7.3.10.u4 || >=7.2.0, <7.2.10.fp17 · fixed in 7.3.10.u4, 7.2.10.fp17

Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting

• Cross-site scripting (XSS)

>=2023.Q3, <2023.Q3.5 || >=7.4.13.u4, <=7.4.13.u92 · fixed in 2023.Q3.5

Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting

• Cross-site scripting (XSS)

>=7.4.10.ep1, <=7.4.13.u92 || >=7.3.10.ep3, <7.3.10.u34 || >=2023.Q3, <2023.Q3.6 · fixed in 7.3.10.u34, 2023.Q3.6

Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting

• Cross-site scripting (XSS)

>=2023.Q3, <2023.Q3.6 || >=7.4.13.u44, <=7.4.13.u92 · fixed in 2023.Q3.6

Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers

• CWE-640

<5.0.18 · fixed in 5.0.18

Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page

• Cross-site request forgery (CSRF)

<5.25.0 · fixed in 5.25.0

Cross-site Scripting Vulnerability in Statement Browser

• Cross-site scripting (XSS)

<1.2.17 · fixed in 1.2.17

Deserialization of Untrusted Data in Apache Camel CassandraQL

• Insecure deserialization

>=3.0.0, <3.21.4 || >=3.22.0, <3.22.1 || >=4.0.0, <4.0.4 || >=4.1.0, <4.4.0 · fixed in 3.21.4, 3.22.1, 4.0.4, 4.4.0

Deserialization of Untrusted Data in Apache Camel SQL

• Insecure deserialization

>=3.0.0, <3.21.4 || >=3.22.0, <3.22.1 || >=4.0.0, <4.0.4 || >=4.1.0, <4.4.0 · fixed in 3.21.4, 3.22.1, 4.0.4, 4.4.0

Liferay Portal and Liferay DXP vulnerable to theft of hashed password

• Information disclosure

>=2023.Q3, <2023.Q3.5 || >=7.4.0, <=7.4.13.u92 · fixed in 2023.Q3.5

Liferay Portal and Liferay DXP User Enumeration Vulnerability

• Information disclosure

<7.2.10.fp20 || >=7.3.0, <7.3.10.u8 || >=7.4.0, <7.4.13.u27 · fixed in 7.2.10.fp20, 7.3.10.u8, 7.4.13.u27

Liferay Portal has a Stored XSS with Blog entries (Insecure defaults)

• CWE-1188

<5.0.96 · fixed in 5.0.96

Liferay Portal and Liferay DXP HTTP Header Can Expose Versions

• CWE-1188

<7.2.10.fp19 || >=7.3.0, <7.3.10.u5 || >=7.4.0, <7.4.13.u26 · fixed in 7.2.10.fp19, 7.3.10.u5, 7.4.13.u26

Liferay Portal vulnerable to Denial of Service

• Denial of service

<7.4.3.16 · fixed in 7.4.3.16