CVE-2024-36265criticalCWE-863

CVE-2024-36265: falha crítica em Apache Submarine Server Core

Apache Submarine Server Core: authorization bypass

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Apache Submarine Server Core+ Monitorar apache-submarine

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.7%
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Submarine Server Core. This issue affects Apache Submarine Server Core: from 0.8.0. An attacker can bypass authentication by sending specially crafted REST requests. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Apache Software Foundation · Apache Submarine Server Core
CVEs relacionadas — Apache Submarine Server Core

No mesmo produto, das mais perigosas para as menos.

CVE-2024-36263HIGHApache Submarine Server Core: SQL injectionEPSS 1.0%