CVE Vulnerability Catalog

A vulnerability in the Apache Camel Shiro component skips credential verification when the subject already bound to the current thread carries the same principal as the incoming exchange. Because threads are pooled and reused, a subject left bound by an earlier authenticated exchange can satisfy the check for a later exchange that presents no valid credentials.

A vulnerability in the Apache Camel Knative component causes sensitive exception details to be disclosed in the HTTP response returned to the remote caller. When exchange processing failed on the consumer side, the response body included the exception's class name, message, and stack trace. An external sender could provoke a failure and read internal deployment details such as class and package names, file system or host names, and route structure.

A Cross-Site Request Forgery (CSRF) vulnerability in the Apache Camel OAuth component stems from the authorization code callback not binding or verifying a state parameter tied to the initiating session. An authorization code obtained in any browser could be redeemed at the callback and associated with the presenting session, enabling login CSRF. The same unvalidated callback handling also allowed the post-authentication redirect target to be influenced, resulting in an open redirect from a trusted origin.

A vulnerability in the Apache Camel Platform HTTP Vertx component involves improper CORS handling: the Access-Control-Allow-Credentials: true header is sent regardless of the origin check result, and when camel.server.cors.origins is unset the handler reflects any origin in Access-Control-Allow-Origin. As a result, any page can make credentialed cross-origin requests to the Camel endpoint and read the responses.

A vulnerability in the Apache Camel Docling component allows implicit selection of message body processing mode based on its prefix (http://, https://, / or \), enabling SSRF, path traversal and exposure of sensitive information. The lack of an option to pin the mode and insufficient path validation allow access to remote resources or local files without deployment opt-in.

Apache Answer through 2.0.2 has an incorrect implementation of authentication algorithm vulnerability. A flaw in the User Center login integration can cause a newly created external user session to omit its external identity, allowing subsequent requests to bypass central account suspension or deletion checks until the session expires or is revoked.

Apache Answer through 2.0.2 has an exposure of sensitive information through data queries vulnerability. An improper authorization check in the similar-question search allowed authenticated users to view metadata of non-public questions.

In Apache Answer through 2.0.2, unauthenticated attackers could access comments associated with non-public content through public user profiles. The flaw stems from insufficient visibility checks on comments.

In Apache Answer through 2.0.2, an authorization flaw in the MCP answer retrieval tool allows holders of a global API key to access answer content associated with hidden, deleted, or pending-review questions.

In Apache Answer through 2.0.2, an unauthenticated or unauthorized user can retrieve the invited-user list associated with a non-public question due to missing visibility authorization checks.

In Apache Answer through 2.0.2, a verification code issued for one email-based workflow could be accepted by another sensitive workflow because the code purpose was not properly enforced.

In Apache Answer through 2.0.2, the importer stores imported question bodies as raw HTML without passing them through the normal Markdown-to-HTML sanitization path. Attacker-controlled HTML embedded in an imported data source is persisted and rendered to all viewers, including privileged users, as stored XSS.

MISP contains a vulnerability in the handling of module plugin settings. When rebuilding module-supplied settings for API consumption, the server drops the redacted and cli_only flags declared in the module's configuration metadata, potentially exposing sensitive credentials and bypassing access restrictions.

MISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interface. Parameter names returned by the misp-modules service are rendered as raw HTML form labels without output encoding, allowing injection of arbitrary HTML or JavaScript.

MISP contains a CSS injection vulnerability in the remote event preview feature. The colour value associated with each remote tag is written directly into an inline CSS style attribute without sufficient validation, allowing injection of arbitrary CSS declarations.

A vulnerability was detected in NLP.js 4.27.0 affecting the Evaluator.walkFunction function in packages/evaluator/src/evaluator.js within the Condition Expression Pipeline component. Manipulating the condition argument results in code injection, and the attack can be launched remotely. The exploit is now public and the project has not yet responded to the issue report.

A vulnerability was determined in pi-agent-dashboard up to 0.8.0 in the WebSocket Gateway component, where manipulating the cwd argument leads to an origin validation error. The attack can be executed remotely and the exploit has been publicly disclosed. Upgrading to version 0.9.0 (patch 48fd0bad5adfe76af9736599699d51a5f60019f6) fixes the issue.

A vulnerability was determined in DeepPavlov up to 1.7.0 affecting the MultiTaskPipelinePreprocessor.__init__ function in deeppavlov/models/preprocessors/multitask_preprocessor.py. Manipulating the preprocessor argument causes code injection, and the attack can be carried out remotely. The exploit has been publicly disclosed and the project has not yet responded to the issue report.

The Tutor LMS plugin up to version 4.1.2 contains a Cross-site Scripting (Stored XSS) vulnerability due to improper neutralization of input during web page generation. This allows a malicious script to be stored and executed in a user's browser.

The Essential Addons for Elementor plugin up to version 6.8.5 contains an Incorrect Privilege Assignment vulnerability that allows Privilege Escalation. The issue stems from flawed privilege checks within the plugin component.