Advisories · Technology
Apache Software Foundation Apache Nutch.
Every CVE that names Apache Software Foundation Apache Nutch among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API)
- Apache Software Foundation Apache Nutch
- Code injection
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)
- Apache Software Foundation Apache Nutch
- Denial of service
- Broken access control
- CVSS 8.8 High
Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)
- Apache Software Foundation Apache Nutch
- Code injection
- Broken access control