Skip to content
OpenAdvisories

Package · Maven

org.apache.karaf:apache-karaf

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2022-22932 Public exploit

    Path traversal flaws

    Apache Karaf obr:* commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder. The risk is low as obr:* commands are not very used and the entry is set by user. This has been fixed in revision: htt…

    Apache Software Foundation Apache Karaf org.apache.karaf:apache-karaf Maven
  • Medium 6.5
    CVE-2019-0191

    Moderate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karaf

    Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It then writes out the content of these paths to the Karaf repo and resources directories. However, it doesn't do any validat…

    Apache Apache Karaf org.apache.karaf:apache-karaf org.apache.karaf:karaf Maven
  • Medium 6.5
    CVE-2016-8750

    Moderate severity vulnerability that affects org.apache.karaf:apache-karaf

    Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service.

    Apache Software Foundation Apache Karaf org.apache.karaf:apache-karaf Maven
  • Medium 5.5
    CVE-2014-0219

    Improper Input Validation in Apache Karaf

    Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.

    org.apache.karaf:apache-karaf Maven