Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Submarine

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-37924

    Apache Submarine: SQL injection from unauthorized login

    Apache Software Foundation Apache Submarine has an SQL injection vulnerability when a user logs in. This issue can result in unauthorized login. Now we have fixed this issue and now user must have the correct login to access workbench. This issue affects Apac…

    Apache Software Foundation Apache Submarine apache-submarine PyPI
  • Critical 9.8
    CVE-2023-46302

    Apache Submarine: Fix CVE-2022-1471 SnakeYaml unsafe deserialization

    Apache Software Foundation Apache Submarine has a bug when serializing against yaml. The bug is caused by snakeyaml https://nvd.nist.gov/vuln/detail/CVE-2022-1471 . Apache Submarine uses JAXRS to define REST endpoints. In order to handle YAML requests (using …

    Apache Software Foundation Apache Submarine apache-submarine PyPI