VYPR

Integration Camel K

by Red Hat

CVEs (23)

  • CVE-2022-41862LowMar 3, 2023
    risk 0.24cvss 3.7epss 0.01

    In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.

  • CVE-2022-4245MedSep 25, 2023
    risk 0.21cvss 4.3epss 0.01

    A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.

  • CVE-2022-2053HigAug 5, 2022
    risk 0.00cvss 7.5epss 0.01

    When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit implementation closes a connection without sending any response to the client/proxy. This behavior results in that a front-end proxy marking…

Page 2 of 2