Maven Advisories.

com.xwiki.confluencepro:application-confluence-migrator-pro-ui Remote Code Execution via unescaped translations

• Code injection

>=1.0, <1.2.0 · fixed in 1.2.0

Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission

• Information disclosure

<2.492.2 || >=2.493, <2.500 · fixed in 2.492.2, 2.500

Jenkins reveals encrypted values of secrets stored in agent configuration to users with Agent/Extended Read permission

• Information disclosure

>=2.493, <2.500 || <2.492.2 · fixed in 2.500, 2.492.2

Jenkins Open Redirect vulnerability

• Open redirect

<2.492.2 || >=2.493, <2.500 · fixed in 2.492.2, 2.500

Jenkins cross-site request forgery (CSRF) vulnerability

• Cross-site request forgery (CSRF)

>=2.493, <2.500 || <2.492.2 · fixed in 2.500, 2.492.2

Emissary May Use a Broken or Risky Cryptographic Algorithm

• Weak cryptography or TLS

<8.24.0 · fixed in 8.24.0

OpenDJ Denial of Service (DoS) using alias loop

• Denial of service

<4.9.3 · fixed in 4.9.3

Lucee RCE/XXE Vulnerability

• XML external entities (XXE)

>=5.3.10.79-RC, <5.3.12.1 || >=5.4.0.65-RC, <5.4.3.2 || <=5.3.7.59 || >=5.3.8.132-RC, <5.3.8.236 || >=5.3.9.113, <5.3.9.173 · fixed in 5.3.12.1, 5.4.3.2, 5.3.8.236, 5.3.9.173

Duplicate Advisory: Wildfly Elytron integration susceptible to brute force attacks via CLI

• Authentication bypass

<=27.0.0.Final · no fixed version yet

Apache Ranger Improper Neutralization of Formula Elements vulnerability

• Other injection

<2.6.0 · fixed in 2.6.0

Pebble has Arbitrary Local File Inclusion (LFI) Vulnerability via `include` macro

• Path traversal

<=3.2.3 · no fixed version yet

WSO2 incorrect authorization vulnerability

• Broken access control

>=4.2.0-beta, <=4.2.0 || >=4.1.0-alpha, <=4.1.0 || >=4.0.0-beta, <=4.0.0 · no fixed version yet

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

• Denial of service

>=3.16.0.CR1, <3.19.1 || >=3.9.0.CR1, <3.15.3.1 || <3.8.6.1 · fixed in 3.19.1, 3.15.3.1, 3.8.6.1

Solon Path Traversal

• Path traversal

<3.0.9 · fixed in 3.0.9

XWiki Platform allows remote code execution as guest via SolrSearchMacros request

• Code injection

>=5.3-milestone-2, <15.10.11 || >=16.0.0-rc-1, <16.4.1 · fixed in 15.10.11, 16.4.1

Kwik hash collision vulnerability

• Denial of service

<0.10.1 · fixed in 0.10.1

Keycloak allows cross-site scripting (XSS)

• Cross-site scripting (XSS)
• CWE-20

<=26.1.2 · no fixed version yet

Duplicate Advisory: Keycloak allows Incorrect Assignment of an Organization to a User

• Broken access control

<26.1.2 · fixed in 26.1.2

Apache EventMesh: raft Hessian Deserialization Vulnerability allowing remote code execution

• Insecure deserialization

>=1.10.1, <1.11.0 · fixed in 1.11.0

Apache Ignite: Possible RCE when deserializing incoming messages by the server node

• Insecure deserialization

>=2.6.0, <2.17.0 · fixed in 2.17.0

Instaclustr Cassandra-Lucene-Index allows bypass of Cassandra RBAC

• Authentication bypass
• Broken access control

>=4.0-rc1-1.0.0, <4.0.17-1.0.0 || >=4.1.0-1.0.0, <4.1.8-1.0.1 · fixed in 4.0.17-1.0.0, 4.1.8-1.0.1

Quarkus REST Endpoint Request Parameter Leakage Due to Shared Instance

• CWE-488

>=3.16.0.CR1, <3.18.2 || >=3.9.0.CR1, <3.15.3.1 || <3.8.6.1 · fixed in 3.18.2, 3.15.3.1, 3.8.6.1

Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user

• Cross-site scripting (XSS)

>=2.0.0, <2.4.0 · fixed in 2.4.0

GeoNetwork search end-point information disclosure in response headers

• Information disclosure

>=4.4.0, <4.4.5 || <4.2.10 · fixed in 4.4.5, 4.2.10

Apache NiFi: Potential Insertion of Sensitive Parameter Values in Debug Log

• Information disclosure

>=1.16.0, <1.28.1 || >=2.0.0-M1, <2.0.0 · fixed in 1.28.1, 2.0.0

Denial of Service attack on windows app using Netty

• Denial of service

<4.1.118.Final · fixed in 4.1.118.Final

SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

• CWE-20

>=4.1.91.Final, <4.1.118.Final · fixed in 4.1.118.Final

Apache Felix Webconsole: XSS in services console

• Cross-site scripting (XSS)

>=4.0.0, <4.9.10 || >=5.0.0, <5.0.10 · fixed in 4.9.10, 5.0.10

SQL injection in JeecgBoot

• SQL injection
• Information disclosure

<3.7.3 · fixed in 3.7.3

Apache James vulnerable to denial of service through JMAP HTML to text conversion

• Denial of service

>=3.8.0, <3.8.2 || <3.7.6 · fixed in 3.8.2, 3.7.6

Apache James vulnerable to denial of service through the use of IMAP literals

• Denial of service
• CWE-20

<3.7.6 || >=3.8.0, <3.8.2 · fixed in 3.7.6, 3.8.2

Netplex Json-smart Uncontrolled Recursion vulnerability

• Denial of service

>=2.5.0, <2.5.2 · fixed in 2.5.2

Keycloak on Quarkus CLI option for encrypted JGroups ignored

• Weak cryptography or TLS

>=25.0.0, <26.0.6 · fixed in 26.0.6

GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions

• Code injection

>=30.0, <30.4 || >=31.0, <31.2 || >=29.0, <29.6 || <28.6 · fixed in 30.4, 31.2, 29.6, 28.6

Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions

• Privilege escalation

>=5.0-alpha1, <5.0.3 || >=4.1-alpha1, <4.1.8 || >=4.0-alpha1, <4.0.16 || >=3.1, <3.11.18 || <3.0.31 · fixed in 5.0.3, 4.1.8, 4.0.16, 3.11.18, 3.0.31

Apache Cassandra: unrestricted deserialization of JMX authentication credentials

• Authentication bypass
• Information disclosure

>=5.0-beta1, <5.0.3 || >=4.1.0, <4.1.8 || >=4.0.2, <4.0.15 · fixed in 5.0.3, 4.1.8, 4.0.15

Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions

• Broken access control

>=4.0-alpha1, <4.0.16 || >=4.1-alpha1, <4.1.8 || >=5.0-alpha1, <5.0.3 · fixed in 4.0.16, 4.1.8, 5.0.3

Jenkins Zoom Plugin is Missing Password Field Masking

• CWE-549

<1.6 · fixed in 1.6

S3Proxy allows insecure path traversal in filesystem and filesystem-nio2 storage backends

• Path traversal

<2.6.0 · fixed in 2.6.0

WildFly improper RBAC permission

• Broken access control

<27.0.1.Final || >=28.0.0.Beta1, <28.0.0.Beta2 · fixed in 27.0.1.Final, 28.0.0.Beta2

PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext

• Information disclosure
• CWE-540

>=6.21.0, <7.10.0 · fixed in 7.10.0

Jenkins Zoom Plugin Stores Sensitive Information in Cleartext

• Information disclosure

<1.4 · fixed in 1.4

General OpenMRS Security Advisory, January 2025: Penetration Testing Results and Patches

• Information disclosure
• Broken access control

<2.19.0 · fixed in 2.19.0

Duplicate Advisory: Wildfly Server Role Based Access Control (RBAC) provider has Improper Access Control

• Broken access control

<=27.0.0.Final · no fixed version yet

Deep Java Library path traversal issue

• Path traversal

<0.31.1 · fixed in 0.31.1

Snowflake JDBC uses insecure temporary credential cache file permissions

• Broken access control

>=3.6.8, <3.22.0 · fixed in 3.22.0

Snowflake JDBC allows an untrusted search path on Windows

• CWE-426

>=3.2.3, <3.22.0 · fixed in 3.22.0

RuoYi allowed unauthorized attackers to view the session ID of the admin in the system monitoring

• Information disclosure

<=4.8.0 · no fixed version yet

RuoYi vulnerable to Denial of Service by attackers with admin privileges

• CWE-281

<=4.8.0 · no fixed version yet

RuoYi has insecure permissions

• Broken access control

<=4.8.0 · no fixed version yet

Apache Hive Incorrectly Assigns Permissions for a Critical Resource

• Broken access control

<4.0.1 · fixed in 4.0.1

Apache Hive vulnerable to Observable Timing Discrepancy and Authentication Bypass by Spoofing

• Authentication bypass
• CWE-208

<4.0.0 · fixed in 4.0.0

Infinispan vulnerable to Insertion of Sensitive Information into Log File

• Information disclosure

<=15.1.4.Final · no fixed version yet

Apache Cocoon vulnerable to Incorrect Usage of Seeds in Pseudo-Random Number Generator

• CWE-335

<=2.3.0 · no fixed version yet

Apache Solr vulnerable to Execution with Unnecessary Privileges

• Privilege escalation

<9.8.0 · fixed in 9.8.0

Apache Solr Relative Path Traversal vulnerability

• Path traversal

>=6.6, <9.8.0 · fixed in 9.8.0

HL7 FHIR IG Publisher potentially exposes GitHub repo user and credential information

• Information disclosure

<1.8.9 · fixed in 1.8.9

XXE vulnerability in XSLT parsing in `org.hl7.fhir.publisher`

• XML external entities (XXE)

<1.7.4 · fixed in 1.7.4

Apache Wicket: An attacker can intentionally trigger a memory leak

• Denial of service

>=7.0.0, <8.17.0 || >=10.0.0, <10.3.0 || >=9.0.0-M1, <9.19.0 · fixed in 8.17.0, 10.3.0, 9.19.0

Cross site scripting in Silverpeas Core

• Cross-site scripting (XSS)

>=6.3.1, <6.4.2 · fixed in 6.4.2