Red Hat Migration Toolkit for Runtimes: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2023-2798

  Denial of service in HtmlUnit

  Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS). If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may suppor…

  htmlunit org.htmlunit:htmlunit jenkins-htmlunit-core-js Ubuntu Maven
  May 25, 2023
• Medium 5.9
  CVE-2023-22899

  Zip4j Origin Validation Error

  Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive.

  net.lingala.zip4j:zip4j zip4j zip4j Debian Ubuntu Maven
  Jan 10, 2023

Revision history

1. 2023-08-13 #2

   Neue Updates von Red Hat aufgenommen

2. 2023-06-27 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2023:4627 vom 2023-08-14
  https://access.redhat.com/errata/RHSA-2023:4627
• RedHat Security Advisory vom 2023-06-27
  https://access.redhat.com/errata/RHSA-2023:3814