DeutschShown in its original language — a full translation is planned for a future version.
Red Hat JBoss Enterprise Application Platform: Mehrere Schwachstellen
view advisory published 2023-02-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0044US | medium6.1 | — | ||
If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information Disclosure. This attack… | ||||
| CVE-2022-41881US | high7.5 | — | ||
Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory vom 2023-02-14external
- Red Hat Security Advisory RHSA-2023:0888 vom 2023-02-21external
- Red Hat Security Advisory RHSA-2023:1006 vom 2023-03-09external
- Red Hat Security Advisory RHSA-2023:1516 vom 2023-04-01external
- Red Hat Security Advisory RHSA-2023:3374 vom 2023-06-03external
- Red Hat Security Advisory RHSA-2023:3954 vom 2023-06-29external
- Red Hat Security Advisory RHSA-2025:1746 vom 2025-02-24external
- Red Hat Security Advisory RHSA-2025:1747 vom 2025-02-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan