Red Hat Codeready Studio 12.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:codeready_studio:12.0:*:*:*:*:*:*:*
part: a version: 12.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Codeready Studio (549c7fe5-3ed0-5d6e-9526-45b1b40bddd4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-1932 |
vulnerable | 2026-06-08 05:52:37.234321 |
Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss
MEDIUM (6.1)
A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.
Published: 2024-11-07T10:00:51.745Z
Updated: 2024-11-07T14:09:26.936Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-4104 |
vulnerable | 2026-06-08 05:38:08.341942 |
Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
Published: 2021-12-14T00:00:00.000Z
Updated: 2026-05-28T19:53:14.378Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3642 |
vulnerable | 2026-06-08 05:33:53.261517 |
Details available
A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.
Published: 2021-08-05T20:48:01.000Z
Updated: 2024-08-03T17:01:07.598Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20218 |
vulnerable | 2026-06-08 05:29:08.728676 |
Details available
A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability. This has been fixed in kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2
Published: 2021-03-16T21:00:32.000Z
Updated: 2024-08-03T17:30:07.581Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10714 |
vulnerable | 2026-06-08 05:16:35.712876 |
Details available
A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Published: 2020-09-23T12:28:17.000Z
Updated: 2024-08-04T11:14:14.215Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.