Oracle Hyperion: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Critical 9.8
  CVE-2023-25690 Public exploit EPSS 84%

  Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

  Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when mod_proxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific patter…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  Mar 7, 2023
• High 8.8
  CVE-2023-27534

  A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly r…

  mysql curl curl curl Debian Ubuntu Azure Linux Alpine
  Mar 30, 2023

Revision history

1. 2023-10-17 #1

   Initiale Fassung

References

• Oracle Critical Patch Update Advisory - October 2023 - Appendix Oracle Hyperion vom 2023-10-17
  https://www.oracle.com/security-alerts/cpuoct2023.html#AppendixHYP