tsi-dpdp-cms vulnerabilities

Information disclosure vulnerability in tsi-coop tsi-dpdp-cms versions 0.5.0/0.5.1/0.5.2 in the JSON Schema Validation component. Manipulation of the _func argument leads to information disclosure, remotely exploitable.

A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. It affects unknown code, and the manipulation results in client-side enforcement of server-side security. The attack can be launched remotely. The exploit has been released publicly. Upgrading to version 0.5.1 resolves the issue.

A vulnerability was identified in tsi-coop tsi-dpdp-cms up to version 0.5.0 in the file InterceptingFilter.java of the Bootstrap Setup Endpoint component. Manipulation leads to missing authentication. The attack can be initiated remotely, and the exploit is publicly available.

A vulnerability was found in tsi-coop tsi-dpdp-cms up to version 0.5.0 in the file web.xml of the Admin Console/DPO Compliance Console component. Executing a manipulation leads to missing authentication. The attack can be launched remotely, and the exploit has been publicly disclosed.