Skip to content
OpenAdvisories

Archive

10 February 2021

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low 2.7

    Denial-of-service in Fleet

    Fleet is an open source osquery manager. In Fleet before version 3.7.0 a malicious actor with a valid node key can send a badly formatted request that causes the Fleet server to exit, resulting in denial of service. This is possible only while a live query is…

  • Low 2.4

    Information Disclosure in go.elastic.co/apm

    The Elastic APM agent for Go versions before 1.11.0 can leak sensitive HTTP header information when logging the details during an application panic. Normally, the APM agent will sanitize sensitive HTTP header details before sending the information to the APM …

  • Low —

    Generation of fake documents via public GET-call

    ### Impact Generation of fake documents via public GET-call ### Patches We recommend to update to the current version 6.3.5.1. You can get the update to 6.3.5.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/…