Karaf Cave
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:karaf_cave:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Karaf Cave (66b5f00e-56bd-5e8f-9ff2-1ae0ded04fb9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/karaf |
purl2cpe | 2026-06-01 10:14:24.831251 |
pkg:github/apache/karaf-cave |
purl2cpe | 2026-06-01 10:14:24.831254 |
pkg:maven/org.apache.karaf.cave/apache-karaf-cave |
purl2cpe | 2026-06-01 10:14:24.831260 |
pkg:maven/org.apache.karaf/cave |
purl2cpe | 2026-06-01 10:14:24.831257 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-34365 |
vulnerable | 2026-06-08 06:37:33.177492 |
Apache Karaf Cave: Cave SSRF and arbitrary file access
** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Karaf Cave.This issue affects all versions of Apache Karaf Cave.
As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2024-05-09T06:49:05.239Z
Updated: 2025-02-13T17:52:29.208Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.