Notre sélection d'alertes et avis SSI.
Sources : US Cert, Cert EU, Cert FR, Cnil, VulDB.

mercredi 25 novembre 2020

Apache Unomi up to 1.5.1 Endpoint /context.json injection

A vulnerability, which was classified as critical, has been found in Apache Unomi up to 1.5.1. Affected by this issue is some unknown functionality of the file /context.json of the component Endpoint Handler. Upgrading to version 1.5.2 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at lists.apache.org. The best possible mitigation is suggested to be upgrading to the latest version.

Lien vers l'article source

Auteur: VulDB

Catégories: VulDBNombre de vues: 75

x

Événements SSI