Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Aurora

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2024-27905

    Apache Aurora: padding oracle can allow construction an authentication cookie

    ** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora. An endpoint exposing internals to unauthenticated users can be used as a "padding oracle" allowing an anonymous attacker to construct a …

    Apache Software Foundation Apache Aurora