Advisories · Technology
malach-it boruta-server.
Every CVE that names malach-it boruta-server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Boruta: Authenticated atom-exhaustion DoS in BorutaIdentityWeb.UserSettingsController.update/2
- malach-it boruta-server
- Denial of service
- CVSS 6.5 Medium
Boruta: OAuth credentials exposed in Boruta business logs
- malach-it boruta-server
- Information disclosure
- CVSS 8.8 High
boruta-server sent sensitive session cookies without the Secure attribute
- malach-it boruta-server
- CWE-614