Skip to content
OpenAdvisories

Archive

7 July 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8

    Keycloak vulnerable to privilege escalation on Token Exchange feature

    A privilege escalation flaw was found in the token exchange feature of keycloak. Missing authorization allows a client application holding a valid access token to exchange tokens for any target client by passing the client_id of the target. This could allow a…

  • Critical 9.1

    Server-Side Request Forgery (SSRF) in nocodb/nocodb

    With this SSRF vulnerability, an attacker can reach internal addresses to make a request as the server and read it's contents. This attack can lead to leak of sensitive information.

  • Critical 9.8
    CVE-2022-32207 EPSS 12%

    When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the…