Advisories · Technology
Red Hat build of Debezium 3.
Every CVE that names Red Hat build of Debezium 3 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw
- Red Hat Exploit Intelligence
- Red Hat OpenShift Serverless
- Broken access control
- CVSS 5.3 Medium
Org.jboss.resteasy/resteasy-core: resteasy: information disclosure through default exception mapper responses
- Red Hat build of Apache Camel 4 for Quarkus 3
- Red Hat build of Apicurio Registry 3
- Information disclosure
- CVSS 5.9 Medium
Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload
- Red Hat JBoss Enterprise Application Platform 8.1.8.GA
- Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10
- Denial of service
- CVSS 7.5 High
Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security
- Red Hat build of Quarkus 3.27.5.SP2
- Red Hat build of Quarkus 3.33.3.SP2
- CWE-551
- CVSS 7.4 High
Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config
- Red Hat
- Red Hat Build of Apache Camel 3.33.4.redhat
- CWE-346
- CWE-942
- CVSS 7.5 High
Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)
- Red Hat
- Red Hat Build of Apache Camel 3.33.4.redhat
- CWE-409
- CVSS 7.5 High
Resteasy-core: resteasy sourceprovider remote unauthenticated file read
- Red Hat Build of Apache Camel 3.33.3.SP1
- Red Hat build of Keycloak 26.6
- XML external entities (XXE)
- CVSS 7.4 High
Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-173