CVE Vulnerability Catalog

The comparison used for the doveadm password and API key is not fully timing safe and can reveal the length of the configured secret. An attacker with access to the same network as the doveadm service, able to make repeated requests and measure response timing accurately, can learn the length of the secret, which reduces the effort needed to guess it. The secret value itself is not disclosed. Restrict network access to the doveadm service to trusted clients. Update to non-vulnerable version. No publicly available exploits are known.

No detailed information in the description. No publicly available exploits are known.

When IMAP compression is enabled, the same compression state is reused across responses in a session, so response sizes depend on both attacker-supplied mail and other mail in the same mailbox. An attacker that can send mail to a user and can also observe the sizes of that user's IMAP traffic can confirm whether the body of a small message matches a guessed text. Recovery of arbitrary unknown content was not demonstrated, but the attack can disclose whether a secret-like message body matches a candidate.

The Quiz and Survey Master (QSM) WordPress plugin before version 11.2.4 does not check authorisation when returning question bank entries through one of its REST API routes. Users with a role as low as Contributor can read the questions, hints and correct answer keys of quizzes belonging to other users.

scrapling-fetch-mcp up to version 0.2.2 is vulnerable to server-side request forgery (SSRF) in the s_fetch_page/s_fetch_pattern functions in src/scrapling_fetch_mcp/_fetcher.py. The attack can be launched remotely. Fixed in version 0.2.3.

Roo-Code up to version 3.51.1 has a vulnerability in the OAuth Callback component (src/integrations/claude-code/oauth.ts) that results in cleartext transmission of sensitive information. The attack can be performed remotely but is difficult to exploit. The project is no longer supported by the maintainer.

Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name. Affects Spring Framework versions 7.0.0-7.0.8, 6.2.0-6.2.19, 6.1.0-6.1.28, 6.0.0-6.0.30, 5.3.0-5.3.49, and 5.2.25.RELEASE and earlier.

Vulnerability in Spring Cloud Stream allows deserialization of untrusted types, which may lead to remote code execution or other deserialization attacks.

In Spring Cloud Stream, the partition interceptor may be improperly added while sending a message, which could lead to unexpected behavior in message processing.

In Spring Cloud Stream Avro, improper caching of the original content type may lead to incorrect processing of Avro data.

In Spring Cloud Stream, the dynamic destination cache size is not properly bound, which may lead to uncontrolled memory growth or other resource issues.

In Spring Cloud Stream, there is a potential for logging sensitive data, which may lead to leakage of confidential information into logs.

In Spring Cloud Function Azure, there is a potential for logging sensitive data, which may lead to leakage of confidential information into logs.

In Spring Cloud Function AWS, there is a potential for logging sensitive data, which may lead to leakage of confidential information into logs.

In Spring Cloud Function, composition lookup can potentially poison the base function, which may lead to unauthorized code execution or manipulation of function behavior.

In Spring Cloud Function, there is a potential for improper filtering of HTTP headers, which may lead to header injection or other header-related attacks.

The implementation of isSecure() in ServerlessHttpServletRequest does not verify the actual scheme, which may lead to incorrect determination of connection security.

PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to ${java.io.tmpdir}/spring-integration/metadata-store.properties with world-readable permissions. Affects Spring Integration versions 7.1.0, 7.0.0-7.0.5, 6.5.0-6.5.10, 6.4.0-6.4.12, and 5.5.21 and earlier.

Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function. Affects versions 5.0.0-5.0.3, 4.3.0-4.3.4, and 4.2.0-4.2.7.

Spring Security's InetAddressMatchers utility provides matchInternal() and matchExternal() builders for constructing an InetAddressMatcher that classifies a given IP address as internal (private) or external (public). Affects Spring Security 7.1.0.