Skip to content
OpenAdvisories
Medium WID-SEC-2025-0138 1 CVE

Oracle REST Data Services: Schwachstelle gefährdet Integrität

Published Jan 21, 2025 · Updated Jan 21, 2025 · de-DE

Vendor: Oracle Product: REST Data Services Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Oracle REST Data Services ausnutzen, um die Integrität zu gefährden.

Product

Oracle REST Data Services (ORDS) ermöglicht die Erstellung grundlegender RESTful Web Services unter Verwendung von PL/SQL.

Vulnerabilities 1

  • Low 3.7
    CVE-2024-6763

    Jetty URI parsing of invalid authority

    Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class, HttpURI, for URI/URL parsing. The HttpURI class does insufficient validation on the authority segment of a URI. However the behaviour of H…

    Eclipse Foundation Jetty druid trino Debian Ubuntu Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References