All CVEs — page 264 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The Backstage TechDocs plugin failed to properly validate Markdown extension configurations, allowing authenticated users to access resources outside the intended documentation boundary. This could lead to exposure of backend data or internal network resources.
This vulnerability allows attackers to hijack authenticated sessions in Apache Jackrabbit by reusing session tokens without proper credential verification, enabling unauthorized access to user sessions. This is particularly dangerous because it can lead to full system compromise through session fixation attacks.
The flaw is a missing authentication vulnerability in the multiprocess mode HTTP server of LMCache, allowing unauthenticated attackers to access sensitive endpoints and perform various operations, including reading environment credentials and modifying tenant quotas.
The flaw is a missing authentication vulnerability in the multiprocess coordinator of LMCache, allowing unauthenticated attackers to access and manipulate the HTTP fleet control API. This can lead to disruption of caching and disclosure of placement metadata.
The vulnerability allows unauthenticated attackers to execute Python code via the /run_script endpoint, leading to remote code execution.