Skip to content
OpenAdvisories
Medium WID-SEC-2023-2672 1 CVE

Oracle REST Data Services: Schwachstelle gefährdet Vertraulichkeit

Published Oct 17, 2023 · Updated Oct 17, 2023 · de-DE

Vendor: Oracle Product: REST Data Services < 23.2.2 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Oracle REST Data Services ausnutzen, um die Vertraulichkeit zu gefährden.

Product

Oracle REST Data Services (ORDS) ermöglicht die Erstellung grundlegender RESTful Web Services unter Verwendung von PL/SQL.

Vulnerabilities 1

  • Low 2.4
    CVE-2023-26049 Public exploit

    Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty

    Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a co…

    Eclipse Foundation jetty.project cassandra-reaper jetty9 Debian Ubuntu Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References